KR20230129221A - IR method and apparatus based on multi-dimensional syndrome in QKD system - Google Patents

Abstract

In the present specification, in a quantum cryptography communication system, in a method for determining key information performed by a device, a random access (RA) preamble is transmitted to another device, and a RAR from the other device in response to the RA preamble (random access response), performs a radio resource control (RRC) connection procedure with the other device, encodes data based on the key information, and transmits the data to the other device, wherein the key information , the device receives parity information from the other device, the device estimates a quantum bit error rate (QBER) based on the parity information, and the device determines a reserved length of a transmission group based on the estimation of the QBER. Wherein, the value of the preliminary length for the transmission group has a value of N, where N is a natural number, and the device determines the final length of the transmission group based on whether N is equal to 2^M , wherein M is a natural number.

Description

IR method and apparatus based on multi-dimensional syndrome in QKD system

This specification relates to quantum communication systems.

Due to the advent of quantum computers, it has become possible to hack existing cryptographic systems based on mathematical complexity (eg, RSA, AES, etc.). To prevent hacking, quantum cryptographic communication is proposed.

Meanwhile, the present specification intends to provide a multi-dimensional syndrome-based IR method among quantum secure communication techniques and an apparatus using the same.

According to an embodiment of the present specification, receiving parity information from another device, estimating a quantum bit error rate (QBER) based on the parity information, and determining a preliminary length of a transmission group based on the estimation of the QBER, , The preliminary length value for the transmission group has a value of N, N is a natural number, and the final length of the transmission group is determined based on whether N is equal to 2^M, where M is a natural number. and determining the key information based on the final length of the transmission group.

According to the present specification, the problem of the existing technique with low throughput can be solved through a lot of leakage information generated for error correction in the IR process during the post-processing process of the QKD system and information transmission through several public channels.

Effects obtainable through specific examples of the present specification are not limited to the effects listed above. For example, there may be various technical effects that a person having ordinary skill in the related art can understand or derive from this specification. Accordingly, the specific effects of the present specification are not limited to those explicitly described in the present specification, and may include various effects that can be understood or derived from the technical features of the present specification.

1 illustrates a system structure of a New Generation Radio Access Network (NG-RAN) to which NR is applied.
Figure 2 illustrates the functional split between NG-RAN and 5GC.
3 shows an example of a 5G usage scenario to which the technical features of the present specification can be applied.
4 is a diagram showing an example of a communication structure that can be provided in a 6G system.
5 schematically illustrates an example of a perceptron structure.
6 schematically illustrates an example of a multilayer perceptron structure.
7 schematically illustrates a deep neural network example.
8 schematically illustrates an example of a convolutional neural network.
9 schematically illustrates an example of a filter operation in a convolutional neural network.
10 schematically illustrates an example of a neural network structure in which a cyclic loop exists.
11 schematically illustrates an example of an operating structure of a recurrent neural network.
12 shows an example of an electromagnetic spectrum.
13 is a diagram showing an example of a THz communication application.
14 is a diagram showing an example of an electronic element-based THz wireless communication transceiver.
15 is a diagram illustrating an example of a method for generating a THz signal based on an optical device, and FIG. 16 is a diagram illustrating an example of a THz wireless communication transceiver based on an optical device.
17 illustrates a structure of a photonic source-based transmitter, and FIG. 18 illustrates a structure of an optical modulator.
19 schematically illustrates an example of quantum cryptographic communication.
20 schematically illustrates an example of an IR process through the BBBSS technique.
21 schematically illustrates an example of an IR process through the Cascade technique.
22 schematically illustrates process (1) of the Winnow technique.
23 schematically illustrates process (2) of the Winnow technique.
24 schematically illustrates process (3) of the Winnow technique.
25 schematically illustrates process (4) of the Winnow technique.
26 schematically shows an example of the leakage information ratio of the cascade technique according to the single-round criterion QBER and the group length.
27 schematically shows an example of the error correction ratio of the cascade technique according to the single-round criterion QBER and the group length.
28 schematically shows an example of the leakage information ratio of the winnow technique according to the single-round criterion QBER and the group length.
29 is a flowchart of a method for determining key information according to an embodiment of the present specification.
30 schematically illustrates process (2) of the group size selection technique according to QBER.
31 schematically illustrates process A of process (3) of the group size selection technique according to QBER.
32 schematically illustrates process B of process (3) of the group size selection scheme according to QBER.
33 schematically illustrates process (5) of the group size selection technique according to QBER.
34 schematically illustrates process (2) of the multidimensional syndrome comparison based IR technique.
35 schematically illustrates process (3) of the multidimensional syndrome comparison based IR technique.
36 schematically illustrates process (4) of the multidimensional syndrome comparison based IR technique.
37 schematically illustrates process (7) of the multidimensional syndrome comparison based IR technique.
38 schematically illustrates an error correction capability improvement effect of a multidimensional IR process.
39 schematically illustrates an example of a device according to an embodiment of the present specification.
40 is a flowchart of a method of determining key information according to another embodiment of the present specification.
41 is a flowchart of a method for determining key information from a device perspective, according to an embodiment of the present specification.
42 is a block diagram of an example of an apparatus for determining key information, from a device perspective, according to an embodiment of the present specification.
43 is a flowchart of a method of determining key information from the viewpoint of another device according to an embodiment of the present specification.
44 is a block diagram of an example of an apparatus for determining key information from another apparatus perspective, according to an embodiment of the present specification.
45 illustrates the communication system 1 applied to this specification.
46 illustrates a wireless device applicable to this specification.
47 shows another example of a wireless device that can be applied to this specification.
48 illustrates a signal processing circuit for a transmission signal.
49 shows another example of a wireless device applied to this specification.
50 illustrates a portable device applied to this specification.
51 illustrates a vehicle or an autonomous vehicle applied in this specification.
52 illustrates a vehicle applied in this specification.
53 illustrates an XR device applied herein.
54 illustrates a robot applied in this specification.
55 illustrates an AI device applied to this specification.

In this specification, "A or B" may mean "only A", "only B", or "both A and B". In other words, "A or B (A or B)" in the present specification may be interpreted as "A and/or B (A and/or B)". For example, “A, B or C” as used herein means “only A”, “only B”, “only C”, or “any and all combinations of A, B and C ( any combination of A, B and C)".

A slash (/) or a comma (comma) used in this specification may mean "and/or". For example, "A/B" can mean "A and/or B". Accordingly, "A/B" may mean "only A", "only B", or "both A and B". For example, "A, B, C" may mean "A, B or C".

In this specification, "at least one of A and B" may mean "only A", "only B", or "both A and B". Also, in this specification, the expression "at least one of A or B" or "at least one of A and/or B" means "at least one It can be interpreted the same as "A and B (at least one of A and B) of

In addition, in this specification, "at least one of A, B and C" means "only A", "only B", "only C", or "A, B and C" It may mean "any combination of A, B and C". Also, "at least one of A, B or C" or "at least one of A, B and/or C" means It can mean "at least one of A, B and C".

Also, parentheses used in this specification may mean “for example”. Specifically, when indicated as “control information (PDCCH)”, “PDCCH” may be suggested as an example of “control information”. In other words, "control information" in this specification is not limited to "PDCCH", and "PDDCH" may be suggested as an example of "control information". Also, even when displayed as “control information (ie, PDCCH)”, “PDCCH” may be suggested as an example of “control information”.

Technical features that are individually described in one drawing in this specification may be implemented individually or simultaneously.

Hereinafter, new radio access technology (new RAT, NR) will be described.

As more and more communication devices require greater communication capacity, a need for improved mobile broadband communication compared to conventional radio access technology (RAT) has emerged. In addition, massive machine type communications (MTC), which provides various services anytime and anywhere by connecting multiple devices and objects, is also one of the major issues to be considered in next-generation communication. In addition, communication system design considering reliability and latency-sensitive services/terminals is being discussed. The introduction of next-generation wireless access technologies considering such expanded mobile broadband communication, massive MTC, URLLC (Ultra-Reliable and Low Latency Communication), etc. is being discussed, and in this specification, for convenience, the corresponding technology is called new RAT or NR.

1 illustrates a system structure of a New Generation Radio Access Network (NG-RAN) to which NR is applied.

Referring to FIG. 1, an NG-RAN may include a gNB and/or an eNB that provides user plane and control plane protocol termination to a UE. 1 illustrates a case including only gNB. gNB and eNB are connected to each other through an Xn interface. The gNB and the eNB are connected to a 5G Core Network (5GC) through an NG interface. More specifically, an access and mobility management function (AMF) is connected through an NG-C interface, and a user plane function (UPF) is connected through an NG-U interface.

Figure 2 illustrates the functional split between NG-RAN and 5GC.

Referring to FIG. 2, the gNB is inter-cell radio resource management (Inter Cell RRM), radio bearer management (RB control), connection mobility control (Connection Mobility Control), radio admission control (Radio Admission Control), measurement setup and provision (Measurement configuration & provision) and dynamic resource allocation. AMF can provide functions such as NAS security and idle state mobility handling. UPF may provide functions such as mobility anchoring and PDU processing. Session Management Function (SMF) may provide functions such as terminal IP address allocation and PDU session control.

3 shows an example of a 5G usage scenario to which the technical features of the present specification can be applied. The 5G usage scenario shown in FIG. 3 is just an example, and the technical features of the present specification may also be applied to other 5G usage scenarios not shown in FIG. 3 .

Referring to FIG. 3, the three major requirements areas of 5G are (1) enhanced mobile broadband (eMBB) area, (2) massive machine type communication (mMTC) area, and ( 3) It includes the ultra-reliable and low latency communications (URLLC) area. Some use cases may require multiple areas for optimization, while other use cases may focus on just one key performance indicator (KPI). 5G supports these diverse use cases in a flexible and reliable way.

eMBB focuses on overall improvements in data rate, latency, user density, capacity and coverage of mobile broadband access. eMBB targets a throughput of around 10 Gbps. eMBB goes far beyond basic mobile Internet access, and covers rich interactive work, media and entertainment applications in the cloud or augmented reality. Data is one of the key drivers of 5G, and we may not see dedicated voice services for the first time in the 5G era. In 5G, voice is expected to be handled simply as an application using the data connection provided by the communication system. The main causes of the increased traffic volume are the increase in content size and the increase in the number of applications requiring high data rates. Streaming services (audio and video), interactive video and mobile internet connections will become more widely used as more devices connect to the internet. Many of these applications require always-on connectivity to push real-time information and notifications to users. Cloud storage and applications are rapidly growing in mobile communication platforms, which can be applied to both work and entertainment. Cloud storage is a particular use case driving the growth of uplink data rates. 5G is also used for remote work in the cloud, requiring much lower end-to-end latency to maintain a good user experience when tactile interfaces are used. In entertainment, for example, cloud gaming and video streaming are other key factors driving the demand for mobile broadband capabilities. Entertainment is essential on smartphones and tablets everywhere, including in highly mobile environments such as trains, cars and planes. Another use case is augmented reality for entertainment and information retrieval. Here, augmented reality requires very low latency and instantaneous amount of data.

mMTC is designed to enable communication between high-volume, low-cost devices powered by batteries, and is intended to support applications such as smart metering, logistics, field and body sensors. mMTC targets 10 years of batteries and/or 1 million devices per square kilometer. mMTC enables seamless connectivity of embedded sensors in all fields and is one of the most anticipated 5G use cases. Potentially, IoT devices are predicted to reach 20.4 billion by 2020. Industrial IoT is one area where 5G is playing a key role enabling smart cities, asset tracking, smart utilities, agriculture and security infrastructure.

URLLC enables devices and machines to communicate with high reliability, very low latency and high availability, making it ideal for vehicular communications, industrial controls, factory automation, remote surgery, smart grid and public safety applications. URLLC targets latency on the order of 1 ms. URLLC includes new services that will transform industries through ultra-reliable/low-latency links, such as remote control of critical infrastructure and autonomous vehicles. This level of reliability and latency is essential for smart grid control, industrial automation, robotics, and drone control and coordination.

Next, a number of usage examples included in the triangle of FIG. 3 will be described in more detail.

5G can complement fiber-to-the-home (FTTH) and cable-based broadband (or DOCSIS) as a means of delivering streams rated at hundreds of megabits per second to gigabits per second. Such high speeds may be required to deliver TV at resolutions of 4K and beyond (6K, 8K and beyond) as well as virtual reality (VR) and augmented reality (AR). VR and AR applications include almost immersive sports events. Certain applications may require special network settings. For example, in the case of VR games, game companies may need to integrate their core servers with the network operator's edge network servers to minimize latency.

Automotive is expected to be an important new driver for 5G, with many use cases for mobile communications to vehicles. For example, entertainment for passengers requires both high capacity and high mobile broadband. The reason is that future users will continue to expect high-quality connections regardless of their location and speed. Another use case in the automotive sector is augmented reality dashboards. Drivers can identify objects in the dark above what they are viewing through the front window via an augmented reality contrast board. The augmented reality dashboard displays overlaid information to inform the driver about the distance and movement of objects. In the future, wireless modules will enable communication between vehicles, exchange of information between vehicles and supporting infrastructure, and exchange of information between vehicles and other connected devices (eg devices carried by pedestrians). A safety system can help reduce the risk of an accident by guiding the driver through an alternate course of action to make driving safer. The next step will be remotely controlled or self-driving vehicles. This requires very reliable and very fast communication between different autonomous vehicles and/or between vehicles and infrastructure. In the future, autonomous vehicles will perform all driving activities, leaving drivers to focus only on traffic anomalies that the vehicle itself cannot identify. The technological requirements of autonomous vehicles require ultra-low latency and ultra-high reliability to increase traffic safety to levels that humans cannot achieve.

Smart cities and smart homes, referred to as smart societies, will be embedded with high-density wireless sensor networks. A distributed network of intelligent sensors will identify conditions for cost- and energy-efficient maintenance of a city or home. A similar setup can be done for each household. Temperature sensors, window and heating controllers, burglar alarms and appliances are all connected wirelessly. Many of these sensors typically require low data rates, low power and low cost. However, real-time HD video, for example, may be required in certain types of devices for surveillance.

The consumption and distribution of energy, including heat or gas, is highly decentralized, requiring automated control of distributed sensor networks. A smart grid interconnects these sensors using digital information and communication technologies to gather information and act on it. This information can include supplier and consumer behavior, enabling the smart grid to improve efficiency, reliability, affordability, sustainability of production and distribution of fuels such as electricity in an automated manner. The smart grid can also be viewed as another low-latency sensor network.

The health sector has many applications that can benefit from mobile communications. The communication system may support telemedicine, which provides clinical care at a remote location. This can help reduce barriers to distance and improve access to health services that are not consistently available in remote rural areas. It is also used to save lives in critical care and emergencies. Mobile communication-based wireless sensor networks can provide remote monitoring and sensors for parameters such as heart rate and blood pressure.

Wireless and mobile communications are becoming increasingly important in industrial applications. Wiring is expensive to install and maintain. Thus, the possibility of replacing cables with reconfigurable wireless links is an attractive opportunity for many industries. However, achieving this requires that wireless connections operate with comparable latency, reliability and capacity to cables, and that their management be simplified. Low latency and very low error probability are the new requirements that need to be connected with 5G.

Logistics and freight tracking is an important use case for mobile communications enabling the tracking of inventory and packages from anywhere using location-based information systems. Logistics and freight tracking use cases typically require low data rates, but may require wide range and reliable location information.

Hereinafter, examples of next-generation communication (eg, 6G) that can be applied to the embodiments of the present specification will be described.

<6G System General>

6G (radio communications) systems are characterized by (i) very high data rates per device, (ii) very large number of connected devices, (iii) global connectivity, (iv) very low latency, (v) battery- It aims to lower energy consumption of battery-free IoT devices, (vi) ultra-reliable connectivity, and (vii) connected intelligence with machine learning capabilities. The vision of the 6G system can be four aspects such as intelligent connectivity, deep connectivity, holographic connectivity, and ubiquitous connectivity, and the 6G system can satisfy the requirements shown in Table 1 below. That is, Table 1 is a table showing an example of requirements for a 6G system.

Per device peak data rate 1 Tbps E2E latency 1ms Maximum spectral efficiency 100 bps/Hz Mobility support Up to 1000km/hr Satellite integration Fully AI Fully Autonomous vehicles Fully XR Fully Haptic Communication Fully

6G systems include Enhanced mobile broadband (eMBB), Ultra-reliable low latency communications (URLLC), massive machine-type communication (mMTC), AI integrated communication, Tactile internet, High throughput, High network capacity, High energy efficiency, Low backhaul and It may have key factors such as access network congestion and enhanced data security. FIG. 4 is a diagram showing an example of a communication structure that can be provided in a 6G system. It is expected to have wireless communication connectivity. URLLC, a key feature of 5G, will become even more important in 6G communications by providing end-to-end latency of less than 1 ms. The 6G system will have much better volume spectral efficiency as opposed to the frequently used area spectral efficiency. 6G systems can provide very long battery life and advanced battery technology for energy harvesting, so mobile devices will not need to be charged separately in 6G systems. In 6G, new network features may be: - Satellites integrated network: 6G is expected to integrate with satellites to provide a global mobile population. Integration of terrestrial, satellite and public networks into one wireless communication system is critical for 6G.

- Connected intelligence: unlike previous generations of wireless communication systems, 6G is revolutionary and will update the wireless evolution from “connected things” to “connected intelligence.” each procedure of processing).

- Seamless integration wireless information and energy transfer: 6G wireless networks will transfer power to charge the batteries of devices such as smartphones and sensors. Therefore, wireless information and energy transfer (WIET) will be integrated.

- Ubiquitous super 3D connectivity: Access to networks and core network capabilities of drones and very low Earth orbit satellites will make super 3D connectivity in 6G ubiquitous.

In the new network characteristics of 6G as above, some general requirements can be as follows.

- Small cell networks: The idea of small cell networks has been introduced to improve received signal quality resulting in improved throughput, energy efficiency and spectral efficiency in cellular systems. As a result, small cell networks are an essential feature of 5G and Beyond 5G (5GB) and beyond communication systems. Therefore, the 6G communication system also adopts the characteristics of the small cell network.

- Ultra-dense heterogeneous network: Ultra-dense heterogeneous networks will be another important feature of 6G communication systems. Multi-tier networks composed of heterogeneous networks improve overall QoS and reduce costs.

- High-capacity backhaul: A backhaul connection is characterized by a high-capacity backhaul network to support high-capacity traffic. High-speed fiber and free space optical (FSO) systems may be possible solutions to this problem.

- Radar technology integrated with mobile technology: High-precision localization (or location-based service) through communication is one of the features of 6G wireless communication systems. Thus, radar systems will be integrated with 6G networks.

- Softwarization and virtualization: Softwarization and virtualization are two important features fundamental to the design process in 5GB networks to ensure flexibility, reconfigurability and programmability. In addition, billions of devices can be shared in a shared physical infrastructure.

<Core implementation technology of 6G system>

Artificial Intelligence

The most important and newly introduced technology for the 6G system is AI. AI was not involved in the 4G system. 5G systems will support partial or very limited AI. However, the 6G system will be AI-enabled for full automation. Advances in machine learning will create more intelligent networks for real-time communication in 6G. Introducing AI in communications can simplify and enhance real-time data transmission. AI can use a plethora of analytics to determine how complex target tasks are performed. In other words, AI can increase efficiency and reduce processing delays.

Time-consuming tasks such as handover, network selection, and resource scheduling can be performed instantly by using AI. AI can also play an important role in M2M, machine-to-human and human-to-machine communications. In addition, AI can be a rapid communication in BCI (Brain Computer Interface). AI-based communication systems can be supported by metamaterials, intelligent structures, intelligent networks, intelligent devices, intelligent cognitive radios, self-sustaining wireless networks, and machine learning.

Recently, there have been attempts to integrate AI with wireless communication systems, but these have been focused on the application layer and network layer, especially deep learning in the field of wireless resource management and allocation. However, these studies are gradually developing into the MAC layer and the physical layer, and in particular, attempts to combine deep learning with wireless transmission are appearing in the physical layer. AI-based physical layer transmission means applying a signal processing and communication mechanism based on an AI driver rather than a traditional communication framework in fundamental signal processing and communication mechanisms. For example, deep learning-based channel coding and decoding, deep learning-based signal estimation and detection, deep learning-based MIMO mechanism, AI-based resource scheduling and may include allocations, etc.

Machine learning may be used for channel estimation and channel tracking, and may be used for power allocation, interference cancellation, and the like in a downlink (DL) physical layer. Machine learning can also be used for antenna selection, power control, symbol detection, and the like in a MIMO system.

However, the application of DNN for transmission in the physical layer may have the following problems.

AI algorithms based on deep learning require a lot of training data to optimize training parameters. However, due to limitations in acquiring data in a specific channel environment as training data, a lot of training data is used offline. This is because static training on training data in a specific channel environment may cause a contradiction between dynamic characteristics and diversity of a radio channel.

In addition, current deep learning mainly targets real signals. However, the signals of the physical layer of wireless communication are complex signals. In order to match the characteristics of wireless communication signals, further research on a neural network for detecting complex domain signals is needed.

Hereinafter, machine learning will be described in more detail.

Machine learning refers to a set of actions that train a machine to create a machine that can do tasks that humans can or cannot do. Machine learning requires data and a running model. In machine learning, data learning methods can be largely divided into three types: supervised learning, unsupervised learning, and reinforcement learning.

Neural network training is aimed at minimizing errors in the output. Neural network learning repeatedly inputs training data to the neural network, calculates the output of the neural network for the training data and the error of the target, and backpropagates the error of the neural network from the output layer of the neural network to the input layer in a direction to reduce the error. ) to update the weight of each node in the neural network.

Supervised learning uses training data in which correct answers are labeled in the learning data, and unsupervised learning may not have correct answers labeled in the learning data. That is, for example, learning data in the case of supervised learning related to data classification may be data in which each learning data is labeled with a category. Labeled training data is input to the neural network, and an error may be calculated by comparing the output (category) of the neural network and the label of the training data. The calculated error is back-propagated in a reverse direction (ie, from the output layer to the input layer) in the neural network, and the connection weight of each node of each layer of the neural network may be updated according to the back-propagation. The amount of change in the connection weight of each updated node may be determined according to a learning rate. The neural network's computation of input data and backpropagation of errors can constitute a learning cycle (epoch). The learning rate may be applied differently according to the number of iterations of the learning cycle of the neural network. For example, a high learning rate is used in the early stages of neural network learning to increase efficiency by allowing the neural network to quickly achieve a certain level of performance, and a low learning rate can be used in the late stage to increase accuracy.

The learning method may vary depending on the characteristics of the data. For example, in a case where the purpose of the receiver is to accurately predict data transmitted by the transmitter in a communication system, it is preferable to perform learning using supervised learning rather than unsupervised learning or reinforcement learning.

The learning model corresponds to the human brain, and the most basic linear model can be considered. ) is called

The neural network cord used as a learning method is largely divided into deep neural networks (DNN), convolutional deep neural networks (CNN), and recurrent Boltzmann Machine (RNN). there is.

An artificial neural network is an example of connecting several perceptrons.

5 schematically illustrates an example of a perceptron structure.

Referring to FIG. 5, when the input vector x=(x1,x2,...,xd) is input, each component is multiplied by the weight (W1,W2,...,Wd), and after summing up the results, The entire process of applying the activation function σ(·) is called a perceptron. The huge artificial neural network structure may extend the simplified perceptron structure shown in FIG. 5 and apply input vectors to different multi-dimensional perceptrons. For convenience of description, an input value or an output value is referred to as a node.

Meanwhile, the perceptron structure shown in FIG. 5 can be described as being composed of a total of three layers based on input values and output values. An artificial neural network with H number of (d + 1) dimensional perceptrons between ^{the 1st} layer and ^{the 2nd} layer and K number of (H + 1) dimensional perceptrons between the 2nd layer and the ^3rd layer can be expressed as shown in FIG. there is.

6 schematically illustrates an example of a multilayer perceptron structure.

The layer where the input vector is located is called the input layer, the layer where the final output value is located is called the output layer, and all the layers located between the input layer and the output layer are called hidden layers. In the example of FIG. 6 , three layers are disclosed, but when counting the number of layers of an actual artificial neural network, the number of layers is counted excluding the input layer, so a total of two layers can be considered. An artificial neural network is composed of two-dimensionally connected perceptrons of basic blocks.

The above-described input layer, hidden layer, and output layer can be jointly applied to various artificial neural network structures such as CNN and RNN, which will be described later, as well as multi-layer perceptrons. As the number of hidden layers increases, the artificial neural network becomes deeper, and a machine learning paradigm that uses a sufficiently deep artificial neural network as a learning model is called deep learning. In addition, the artificial neural network used for deep learning is called a deep neural network (DNN).

7 schematically illustrates a deep neural network example.

The deep neural network shown in FIG. 7 is a multi-layer perceptron consisting of 8 hidden layers + 8 output layers. The multilayer perceptron structure is expressed as a fully-connected neural network. In a fully-connected neural network, there is no connection relationship between nodes located on the same layer, and a connection relationship exists only between nodes located on adjacent layers. DNN has a fully-connected neural network structure and is composed of a combination of multiple hidden layers and activation functions, so it can be usefully applied to identify the correlation characteristics between inputs and outputs. Here, the correlation characteristic may mean a joint probability of input and output.

On the other hand, depending on how a plurality of perceptrons are connected to each other, various artificial neural network structures different from the aforementioned DNN can be formed.

8 schematically illustrates an example of a convolutional neural network.

In DNN, nodes located inside one layer are arranged in a one-dimensional vertical direction. However, in FIG. 8, it can be assumed that the nodes are two-dimensionally arranged with w nodes horizontally and h nodes vertically (convolutional neural network structure of FIG. 8). In this case, a weight is added for each connection in the connection process from one input node to the hidden layer, so a total of hХw weights must be considered. Since there are hХw nodes in the input layer, a total of h ² w ² weights are required between two adjacent layers.

The convolutional neural network of FIG. 8 has a problem in that the number of weights increases exponentially according to the number of connections, so instead of considering all mode connections between adjacent layers, it is assumed that there is a filter with a small size, and FIG. 9 As shown in , weighted sum and activation function calculations are performed for overlapping filters.

9 schematically illustrates an example of a filter operation in a convolutional neural network.

One filter has weights corresponding to the number of filters, and learning of weights can be performed so that a specific feature on an image can be extracted as a factor and output. In FIG. 9 , a 3Х3 size filter is applied to the 3Х3 region at the top left of the input layer, and an output value obtained by performing a weighted sum and an activation function operation for a corresponding node is stored in z ₂₂ .

While scanning the input layer, the filter moves by a certain distance horizontally and vertically, performs weighted sum and activation function calculations, and places the output value at the position of the current filter. This operation method is similar to the convolution operation for images in the field of computer vision, so the deep neural network of this structure is called a convolutional neural network (CNN), and the hidden layer generated as a result of the convolution operation is called a convolutional layer. Also, a neural network having a plurality of convolutional layers is referred to as a deep convolutional neural network (DCNN).

In the convolution layer, the number of weights can be reduced by calculating a weighted sum by including only nodes located in a region covered by the filter from the node where the current filter is located. This allows one filter to be used to focus on features for a local area. Accordingly, CNN can be effectively applied to image data processing in which a physical distance in a 2D area is an important criterion. Meanwhile, in the CNN, a plurality of filters may be applied immediately before the convolution layer, and a plurality of output results may be generated through a convolution operation of each filter.

Meanwhile, there may be data whose sequence characteristics are important according to data attributes. Considering the length variability and precedence relationship of these sequence data, input each element on the data sequence one by one at each time step, and input the output vector (hidden vector) of the hidden layer output at a specific time point together with the next element on the sequence A structure in which this method is applied to an artificial neural network is called a recurrent neural network structure.

10 schematically illustrates an example of a neural network structure in which a cyclic loop exists.

Referring to FIG. 10, a recurrent neural network (RNN) assigns an element (x1(t), x2(t), ,..., xd(t)) of any line t on a data sequence to a fully connected neural network. In the process of inputting, the immediately preceding time point t-1 inputs the hidden vector (z1(t-1), z2(t-1),..., zH(t-1)) together to calculate the weighted sum and activation function structure that is applied. The reason why the hidden vector is transmitted to the next time point in this way is that information in the input vector at previous time points is regarded as being accumulated in the hidden vector of the current time point.

11 schematically illustrates an example of an operating structure of a recurrent neural network.

Referring to FIG. 11, the recurrent neural network operates in a sequence of predetermined views with respect to an input data sequence.

When the input vector (x1(t), x2(t), ,..., xd(t)) at time 　1 is input to the recurrent neural network, the hidden vector 　(z1(1),z2(1),.. .,zH(1)) is input together with the input vector of time 　2 (x1(2),x2(2),...,xd(2)), and the vector of the hidden layer 　 (z1( 2),z2(2) ,...,zH(2)). This process is repeatedly performed until time point 2, point 3, ,,, point T.

Meanwhile, when a plurality of hidden layers are arranged in a recurrent neural network, it is referred to as a deep recurrent neural network (DRNN). Recurrent neural networks are designed to be usefully applied to sequence data (eg, natural language processing).

As a neural network core used as a learning method, in addition to DNN, CNN, and RNN, Restricted Boltzmann Machine (RBM), deep belief networks (DBN), and Deep Q-Network It includes various deep learning techniques such as computer vision, voice recognition, natural language processing, and voice/signal processing.

Recently, there have been attempts to integrate AI with wireless communication systems, but these have been focused on the application layer and network layer, especially deep learning in the field of wireless resource management and allocation. However, these studies are gradually developing into the MAC layer and the physical layer, and in particular, attempts to combine deep learning with wireless transmission are appearing in the physical layer. AI-based physical layer transmission means applying a signal processing and communication mechanism based on an AI driver rather than a traditional communication framework in fundamental signal processing and communication mechanisms. For example, deep learning-based channel coding and decoding, deep learning-based signal estimation and detection, deep learning-based MIMO mechanism, AI-based resource scheduling and may include allocations, etc.

Terahertz (THz) communication

The data rate can be increased by increasing the bandwidth. This can be done using sub-THz communication with wide bandwidth and applying advanced massive MIMO technology. THz waves, also known as submillimeter radiation, typically represent a frequency band between 0.1 THz and 10 THz with corresponding wavelengths in the range of 0.03 mm-3 mm. The 100 GHz-300 GHz band range (sub THz band) is considered a major part of the THz band for cellular communications. 6G cellular communication capacity increases when added to the sub-THz band mmWave band. Of the defined THz bands, 300 GHz-3 THz is in the far-infrared (IR) frequency band. The 300 GHz-3 THz band is part of the broad band, but is at the border of the wide band, just behind the RF band. Thus, this 300 GHz-3 THz band exhibits similarities to RF.

12 shows an example of an electromagnetic spectrum.

The main characteristics of THz communications include (i) widely available bandwidth to support very high data rates, and (ii) high path loss at high frequencies (highly directional antennas are indispensable). The narrow beamwidth produced by the highly directional antenna reduces interference. The small wavelength of the THz signal allows a much larger number of antenna elements to be incorporated into devices and BSs operating in this band. This enables advanced adaptive array technology to overcome range limitations.

Optical wireless technology

OWC technology is intended for 6G communications in addition to RF-based communications for all possible device-to-access networks. These networks access network-to-backhaul/fronthaul network connections. OWC technology is already in use after the 4G communication system, but will be more widely used to meet the needs of the 6G communication system. OWC technologies such as light fidelity, visible light communication, optical camera communication, and FSO communication based on a wide band are already well-known technologies. Communications based on optical wireless technology can provide very high data rates, low latency and secure communications. LiDAR can also be used for ultra-high resolution 3D mapping in 6G communication based on broadband.

FSO backhaul network

The transmitter and receiver characteristics of an FSO system are similar to those of a fiber optic network. Thus, data transmission in FSO systems is similar to fiber optic systems. Therefore, FSO can be a good technology to provide backhaul connectivity in 6G systems along with fiber optic networks. With FSO, very long-distance communication is possible even at a distance of 10,000 km or more. FSO supports high-capacity backhaul connectivity for remote and non-remote locations such as ocean, space, underwater and isolated islands. FSO also supports cellular BS connections.

Massive MIMO technology

One of the key technologies to improve spectral efficiency is to apply MIMO technology. As MIMO technology improves, so does the spectral efficiency. Therefore, massive MIMO technology will be important in 6G systems. Since MIMO technology uses multiple paths, multiplexing technology and beam generation and operation technology suitable for the THz band must be considered as important so that data signals can be transmitted through more than one path.

block chain

Blockchain will be an important technology for managing large amounts of data in future communication systems. Blockchain is a form of distributed ledger technology, where a distributed ledger is a database that is distributed across numerous nodes or computing devices. Each node replicates and stores an identical copy of the ledger. Blockchain is managed as a peer-to-peer network. It can exist without being managed by a centralized authority or server. Data on a blockchain is collected together and organized into blocks. Blocks are linked together and protected using cryptography. Blockchain is the perfect complement to the IoT at scale with inherently improved interoperability, security, privacy, reliability and scalability. Thus, blockchain technology provides multiple capabilities such as interoperability between devices, traceability of large amounts of data, autonomous interaction of other IoT systems, and large-scale connection reliability in 6G communication systems.

3D Networking

The 6G system integrates terrestrial and air networks to support vertical expansion of user communications. 3D BS will be provided via low-orbit satellites and UAVs. Adding a new dimension in terms of height and related degrees of freedom makes 3D connections quite different from traditional 2D networks.

quantum communication

In the context of 6G networks, unsupervised reinforcement learning of networks is promising. Supervised learning approaches cannot label the vast amount of data generated by 6G. Labeling is not required in unsupervised learning. Thus, this technique can be used to autonomously build representations of complex networks. Combining reinforcement learning and unsupervised learning allows networks to operate in a truly autonomous way.

drone

Unmanned Aerial Vehicles (UAVs) or drones will be an important element in 6G wireless communications. In most cases, high-speed data wireless connectivity is provided using UAV technology. BS entities are installed on UAVs to provide cellular connectivity. UAVs have certain features not found in fixed BS infrastructures, such as easy deployment, strong line-of-sight links, and degrees of freedom with controlled mobility. During emergencies, such as natural disasters, deployment of terrestrial communications infrastructure is not economically feasible and cannot provide services in sometimes volatile environments. UAVs can easily handle this situation. UAVs will become a new paradigm in the field of wireless communication. This technology facilitates three basic requirements of a wireless network: eMBB, URLLC and mMTC. UAVs can also support multiple purposes, such as improving network connectivity, fire detection, disaster emergency services, security and surveillance, pollution monitoring, parking monitoring, accident monitoring, and more. Therefore, UAV technology is recognized as one of the most important technologies for 6G communication.

Cell-free Communication

The tight integration of multiple frequencies and heterogeneous communication technologies is critical for 6G systems. As a result, users can seamlessly move from one network to another without having to make any manual configuration on the device. The best network is automatically selected from available communication technologies. This will break the limitations of the cell concept in wireless communication. Currently, user movement from one cell to another causes too many handovers in high-density networks, resulting in handover failures, handover delays, data loss and ping-pong effects. 6G cell-free communication will overcome all of this and provide better QoS. Cell-free communication will be achieved through multi-connectivity and multi-tier hybrid technologies and different heterogeneous radios of devices.

Integration of wireless information and energy transmission

WIET uses the same fields and waves as wireless communication systems. In particular, sensors and smartphones will be charged using wireless power transfer during communication. WIET is a promising technology for extending the lifetime of battery charging wireless systems. Thus, battery-less devices will be supported in 6G communications.

Integration of sensing and communication

Autonomous radio networks are capable of continuously sensing dynamically changing environmental conditions and exchanging information between different nodes. In 6G, sensing will be tightly integrated with communications to support autonomous systems.

Integration of access backhaul networks

In 6G, the density of access networks will be enormous. Each access network is connected by fiber and backhaul connections such as FSO networks. To cope with the very large number of access networks, there will be tight integration between access and backhaul networks.

Holographic Beamforming

Beamforming is a signal processing procedure that adjusts an antenna array to transmit radio signals in a specific direction. A subset of smart antennas or advanced antenna systems. Beamforming technology has several advantages such as high call-to-noise ratio, interference avoidance and rejection, and high network efficiency. Hologram beamforming (HBF) is a new beamforming method that differs significantly from MIMO systems because it uses software-defined antennas. HBF will be a very effective approach for efficient and flexible transmission and reception of signals in multi-antenna communication devices in 6G.

big data analytics

Big data analysis is a complex process for analyzing various large data sets or big data. This process ensures complete data management by finding information such as hidden data, unknown correlations and customer preferences. Big data is collected from various sources such as videos, social networks, images and sensors. This technology is widely used to process massive data in 6G systems.

Large Intelligent Surface (LIS)

In the case of THz band signals, there may be many shadow areas due to obstructions due to strong linearity. By installing LIS near these shadow areas, LIS technology that expands the communication area, strengthens communication stability, and provides additional additional services becomes important. An LIS is an artificial surface made of electromagnetic materials and can change the propagation of incoming and outgoing radio waves. LIS can be seen as an extension of massive MIMO, but its array structure and operating mechanism are different from massive MIMO. LIS also has low power consumption in that it operates as a reconfigurable reflector with passive elements, i.e. it only passively reflects signals without using an active RF chain. There are advantages to having In addition, since each passive reflector of the LIS must independently adjust the phase shift of an incident signal, it may be advantageous for a wireless communication channel. By properly adjusting the phase shift through the LIS controller, the reflected signal can be collected at the target receiver to boost the received signal power.

<General terahertz (THz) wireless communication>

THz wireless communication uses wireless communication using THz waves having a frequency of approximately 0.1 to 10 THz (1THz = 10 ¹² Hz), and refers to terahertz (THz) band wireless communication using a very high carrier frequency of 100 GHz or more. can THz waves are located between RF (Radio Frequency)/millimeter (mm) and infrared bands, and (i) transmit non-metal/non-polarizable materials better than visible light/infrared rays, and have a shorter wavelength than RF/millimeter waves and have high straightness. Beam focusing may be possible. In addition, since the photon energy of the THz wave is only a few meV, it is harmless to the human body. A frequency band expected to be used for THz wireless communication may be a D-band (110 GHz to 170 GHz) or H-band (220 GHz to 325 GHz) band with low propagation loss due to molecular absorption in the air. Standardization discussions on THz wireless communication are being discussed centering on the IEEE 802.15 THz working group in addition to 3GPP, and standard documents issued by the IEEE 802.15 Task Group (TG3d, TG3e) can specify or supplement the content described in this specification. there is. THz wireless communication may be applied to wireless cognition, sensing, imaging, wireless communication, THz navigation, and the like.

13 is a diagram showing an example of a THz communication application.

As shown in FIG. 13, THz wireless communication scenarios can be classified into macro networks, micro networks, and nanoscale networks. In macro networks, THz wireless communication can be applied to vehicle-to-vehicle connections and backhaul/fronthaul connections. In micro networks, THz wireless communication is applied to indoor small cells, fixed point-to-point or multi-point connections such as wireless connections in data centers, and near-field communication such as kiosk downloading. It can be.

Table 2 below is a table showing an example of a technique that can be used in THz waves.

Transceivers Device Available immature: UTC-PD, RTD and SBD Modulation and coding Low order modulation techniques (OOK, QPSK), LDPC, Reed Soloman, Hamming, Polar, Turbo Antenna Omni and Directional, phased array with low number of antenna elements Bandwidth 69GHz (or 23GHz) at 300GHz Channel models Partially Data rate 100 Gbps outdoor deployment No Free space loss High Coverage Low Radio Measurements 300GHz indoor Device size Few micrometers

THz wireless communication can be classified based on the method for generating and receiving THz. The THz generation method can be classified as an optical device or an electronic device based technology. 14 is a diagram showing an example of an electronic device-based THz wireless communication transceiver. A method of generating THz using an electronic device includes a method using a semiconductor device such as a resonant tunneling diode (RTD), a local oscillator, and a multiplier. There are a method using a method using a compound semiconductor HEMT (High Electron Mobility Transistor) based integrated circuit, an MMIC (Monolithic Microwave Integrated Circuits) method using a compound semiconductor HEMT (High Electron Mobility Transistor) based integrated circuit, and a method using a Si-CMOS based integrated circuit. In the case of FIG. 14, a doubler, a tripler, or a multiplier is applied to increase the frequency, and the signal is radiated by the antenna after passing through the subharmonic mixer. Since the THz band forms high frequencies, a multiplier is essential. Here, the multiplier is a circuit that makes the output frequency N times greater than the input, matches the desired harmonic frequency, and filters out all other frequencies. In addition, beamforming may be implemented by applying an array antenna or the like to the antenna of FIG. 14 . 14, IF denotes an intermediate frequency, tripler and multipler denote a multiplier, PA denotes a power amplifier, LNA denotes a low noise amplifier, and PLL denotes a phase-locked circuit (Phase -Locked Loop). 15 is a diagram illustrating an example of a method for generating a THz signal based on an optical device, and FIG. 16 is a diagram illustrating an example of a THz wireless communication transceiver based on an optical device.

Optical device-based THz wireless communication technology refers to a method of generating and modulating a THz signal using an optical device. An optical element-based THz signal generation technology is a technology that generates an ultra-high speed optical signal using a laser and an optical modulator and converts it into a THz signal using an ultra-high speed photodetector. Compared to a technique using only an electronic device, this technique can easily increase the frequency, generate a high-power signal, and obtain a flat response characteristic in a wide frequency band. As shown in FIG. 15, a laser diode, a broadband light modulator, and a high-speed photodetector are required to generate a THz signal based on an optical device. In the case of FIG. 15 , a THz signal corresponding to a wavelength difference between the lasers is generated by multiplexing light signals of two lasers having different wavelengths. In FIG. 15, an optical coupler refers to a semiconductor device that transmits an electrical signal using light waves in order to provide electrical isolation and coupling between circuits or systems, and UTC-PD (Uni-Traveling Carrier Photo- Detector is one of the photodetectors, which uses electrons as active carriers and reduces the movement time of electrons through bandgap grading. UTC-PD is capable of photodetection above 150 GHz. 16, EDFA (Erbium-Doped Fiber Amplifier) represents an erbium-added optical fiber amplifier, PD (Photo Detector) represents a semiconductor device capable of converting an optical signal into an electrical signal, and OSA represents various optical communication functions (photoelectric conversion, electric light conversion, etc.) represents an optical module (Optical Sub Assembly) that is modularized into one component, and DSO represents a digital storage oscilloscope.

The structure of the photoelectric converter (or photoelectric converter) will be described with reference to FIGS. 17 and 18 . 17 illustrates a structure of a photonic source-based transmitter, and FIG. 18 illustrates a structure of an optical modulator.

In general, a phase or the like of a signal may be changed by passing an optical source of a laser through an optical wave guide. At this time, data is loaded by changing electrical characteristics through a microwave contact or the like. Accordingly, the optical modulator output is formed as a modulated waveform. A photoelectric modulator (O/E converter) is an optical rectification operation by a nonlinear crystal, an O/E conversion by a photoconductive antenna, and a bundle of electrons in light flux. THz pulses can be generated according to emission from relativistic electrons, etc. A THz pulse generated in the above manner may have a unit length of femto second to pico second. An O/E converter uses non-linearity of a device to perform down conversion.

Considering the THz spectrum usage, it is necessary to use several contiguous GHz bands for fixed or mobile service for terahertz systems. more likely to use According to outdoor scenario criteria, available bandwidth may be classified based on oxygen attenuation of 10^2 dB/km in a spectrum up to 1 THz. Accordingly, a framework in which the available bandwidth is composed of several band chunks may be considered. As an example of the framework, if the length of a THz pulse for one carrier is set to 50 ps, the bandwidth (BW) becomes about 20 GHz.

Effective down conversion from the IR band to the THz band depends on how to utilize the nonlinearity of the O/E converter. That is, in order to down-convert to the desired terahertz band (THz band), the photoelectric converter (O / E converter) having the most ideal non-linearity to move to the corresponding terahertz band (THz band) design is required. If an O/E converter that does not fit the target frequency band is used, there is a high possibility that an error will occur with respect to the amplitude and phase of the corresponding pulse.

In a single carrier system, a terahertz transmission/reception system may be implemented using one photoelectric converter. Although it depends on the channel environment, as many photoelectric converters as the number of carriers may be required in a multi-carrier system. In particular, in the case of a multi-carrier system using several broadbands according to a plan related to the above-mentioned spectrum use, the phenomenon will be conspicuous. In this regard, a frame structure for the multi-carrier system may be considered. A signal down-frequency converted based on the photoelectric converter may be transmitted in a specific resource region (eg, a specific frame). The frequency domain of the specific resource domain may include a plurality of chunks. Each chunk may consist of at least one component carrier (CC).

Hereinafter, the present specification will be described in more detail.

In this specification, post-processing (quantum bit error rate (QBER)) estimation, key information error correction, and confidentiality amplification after exchanging quantum keys in a quantum key distribution (QKD) system among quantum secure communication techniques In the information reconciliation (IR) process, which is an error correction process for matching sifted quantum keys shared by the transceiver, high throughput while minimizing the amount of leakage information of quantum key information deals with techniques and devices on how to secure

19 schematically illustrates an example of quantum cryptographic communication.

According to FIG. 19 , a quantum key distribution (QKD) transmitter 1910 may perform communication by being connected to a QKD receiver 1920 through a public channel and a quantum channel.

At this time, the QKD transmitter 1910 may supply the secret key to the encryptor 1930, and the QKD receiver 1920 may also supply the secret key to the decryptor 1940. Here, plain text may be input to the encryptor 1930, and the encryptor 1930 may transmit data encrypted with a secret symmetric key to the decryptor 1940 (through an existing communication network). In addition, plain text may also be output to the decoder 1940.

As shown in FIG. 19, the quantum cryptographic communication system consists of a part that encrypts/decrypts information by combining information to be transmitted with quantum secret key information, and a quantum key distribution (QKD) part that generates secret symmetric key information used at this time. . To generate a secret symmetric key, the QKD transceiver first shares the key information by transmitting quantum key information generated through polarization or phase coding through a quantum channel. However, in this process, shared key information between transceivers cannot be perfectly matched due to the existence of an eavesdropper, component devices, and incompleteness of quantum channels. Therefore, a post-processing process to correct this is absolutely necessary, and after performing the post-processing process through an open channel, a final secret symmetric key is generated and supplied to the encryptor and decryptor as the secret key. The post-processing process of quantum cryptography communication technology is largely composed of three steps: the error rate estimation step of quantum key information, the quantum key error recovery step, and the secrecy amplification step.

In this specification, two major problems of the IR (information reconciliation) process for matching quantum key information of the transceiver and receiver are dealt with, a large amount of key information loss due to the generation of a large amount of leaked information and a low throughput problem.

In the IR process, additional information necessary for the correction process for matching the quantum key information of the transceiver is required, and through this information, the location of the error key information is found and corrected. However, information necessary for error correction is exchanged between transceivers through an open channel, and information transmitted through an open channel can be intercepted by a third party. And at this time, as the amount of leaked information increases, the possibility of eavesdropping of key information increases. In order to block this, in the post-processing process, the same amount of sifted key information as the amount of information disclosed through the public channel is discarded, and through this, the privacy of the key information is maintained. Therefore, reducing the amount of leaked information in the IR process can reduce the risk of eavesdropping and at the same time reduce the loss of sifted keys. Low key rate due to key information loss, which is one of the main problems of current quantum cryptography communication technology problem can be improved.

In addition, if correction of the sifted key information in which an error occurred through one IR process cannot be completed during the IR process through the public channel, the sifted key information of the transceiver unit is disclosed until it is perfectly matched. The information required for error correction is repeatedly transmitted several times through the channel. Therefore, the higher the QBER included in the sifted key, the more time is consumed for processing because information sharing through public channels is required more times to match key information. Therefore, as many errors are corrected as accurately as possible in one IR process, the number of times of information exchange through an open channel can be minimized, thereby improving the low throughput of the QKD system.

In relation to this, the basic configuration method of three representative IR techniques, BBBSS, Cascade, and Winnow techniques, and problems related to the above two perspectives are as follows.

20 schematically illustrates an example of an IR process through the BBBSS technique.

First of all, the BBBSS technique, which is the first IR technique, consists of two steps of dividing a long sifted key string into groups of a certain length and correcting errors through binary search, as shown in FIG. It is known to have good error correction ability at low QBER.

The detailed process of the BBBSS technique proceeds as follows.

(1) After dividing the sifted key sequence in the transmitter (Alice side) into groups of a certain length, parity information of each group is sent to the receiver (Bob side) through an open channel.

(2) The receiving unit also divides the sifted key sequence into groups having the same length as the transmitting unit, and calculates parity information for each group.

(3) The receiver determines whether an odd number of errors has occurred in each group through comparison with the parity information received from the transmitter.

(4) After dividing the length of the group determined to have an error in half, steps 1 to 3 are repeated. Groups are divided into halves until the 1-bit error of the group finally determined to have an error is found, and the process of finding the error is repeated. When the position of the final 1-bit error is determined, the value is corrected.

However, the BBBSS technique has a problem in that error correction capability rapidly deteriorates as the QBER increases. This occurs due to the increased probability that an even number of errors exist in a group. In the BBBSS technique, parity comparison of each group can detect only cases where an odd number of errors exist. Therefore, a group with an even number of errors cannot be detected. As QBER increases, the possibility of groups with an even number of errors exists As , the error correction capability of BBBSS is greatly reduced.

To solve this problem, the Cascade technique, an improved version of BBBSS, has emerged, and research on related technologies has been actively conducted. The Cascade technique is an error correction technique with an error correction capability close to Shannon's limit, and shows excellent error correction performance even at high QBER. Unlike BBBSS, the cascade technique performs random permutation for an even distribution of errors in the first step as shown in FIG. 21, and then selects in groups of appropriate sizes. Due to the addition of a traceback process that divides the key column and proceeds with a binary search process, and then remembers the location of the existing error group, fixes some errors, then goes back to the error group and fixes the remaining errors. Occurs.

21 schematically illustrates an example of an IR process through the Cascade technique.

The Cascade technique repeats the above process in several rounds, and the detailed error correction process is as follows.

(1) Random permutation is performed so that the errors of the sifted key sequence of the transceiver can be evenly distributed.

(2) In the first round, the key sequence of the transmitter/receiver is divided into units of block size k_1, and the transmitter transmits the parity information of each group to the receiver through the public channel. (The size of k_1 is obtained using the result p of QBER estimation. k_1 = 0.73/p)

(3) The receiving part compares the parity of the receiving part and the parity of the sending part, and then fixes the error bit of each group through a binary search process. However, at this time, information after error correction is not removed.

(4) Random permutation is performed again to proceed to the next round. After doubling the length of the group, repeat steps 1 - 3.

(5) By performing the traceback process, the remaining errors from the smallest group size of the first round to the group location where the first error exists are corrected through binary search. The traceback process is performed only there after storing the locations of groups determined to have errors from the first round to the current round.

(6) When the preset maximum rounds are reached, the technique ends.

However, in the cascade technique, log_2(N)+1 bit(s) of information must be transmitted to the public channel to correct one bit error in one group composed of N bits, and this process is repeated over several rounds, so in the IR process A lot of leaked information. In addition, at this time, in order to reduce the amount of information provided to a third party through the public channel, the transmitter/receiver discards one bit of sifted key information from a group in which all parity information is leaked. Therefore, in the IR process using cascade, a lot of sifted key information disappears in this process, and as a result, the sifted key rate is greatly reduced. In addition, there is a problem in that the number of times of information transmission through the public channel is increased due to the addition of a process of transmitting not only parity information for error correction in each round but also random number substitution information in a random permutation process to the transmitter.

To improve this, a Hamming code-based winnow protocol was proposed by Buttler. Compared to the conventional cascade technique, this technique has an advantage of lowering latency by reducing the number of sharing of additional information through an open channel in a transmitter/receiver unit. This occurs because the binary search process of the existing cascade technique is converted into the syndrome-based error correction process of Hamming code.

The detailed IR process using the Winnow technique proceeds in the following order.

22 schematically illustrates process (1) of the Winnow technique.

(1) After the sifted key is shared to the transceiver through the quantum channel, the receiver divides the sifted key sequence into b = 8 bit(s), which is the minimum unit group length, and the parity of each group find a value Then, the parity values of the entire group of receivers are sent to the transmitter through the public channel.

23 schematically illustrates process (2) of the Winnow technique.

(2) In the transmitter, after dividing into groups in the same way as in the receiver, the parity value of each group is obtained. After that, parity values of the transmission/reception unit are compared to determine the location of a group having an odd number of errors. In this process, in order to reduce the possibility of eavesdropping due to leaked information, the last bit of all groups of the transceiver is removed.

24 schematically illustrates process (3) of the Winnow technique.

(3) In order to correct an error in a group determined to be an error group, the transmission unit obtains a syndrome by multiplying a parity check matrix H^m shared by the transmission and reception units in advance and each group key information, and then the transmission unit and the reception unit It is transmitted to the receiving unit through the public channel along with information on the error group location where the syndrome does not match.

25 schematically illustrates process (4) of the Winnow technique.

를 통해 i번째 블록(block)의 오류 위치를 찾고 해당 비트의 값을 플립(flip)하여 오류를 정정한다. 이 때, 오류 정정을 수행할 비트의 위치는 패리티 체크 매트릭스의 각 콜롬(column) 중 S_d^i와 일치하는 콜롬(column)의 위치를 통해 얻어진다.(4) The difference between the syndromes of the i-th group sent by the transmitter after obtaining the syndrome of the group determined to have an error in the receiver from the same parity check matrix as that of the transmitter

Finds the error position of the ith block through and corrects the error by flipping the value of the corresponding bit. At this time, the position of the bit to perform error correction is obtained through the position of the column matching S_d^i among the columns of the parity check matrix.

At this time, in the error-corrected group, the number of bits of the sifted key corresponding to the amount of syndrome information is additionally discarded in order to minimize the risk of eavesdropping by a third party due to information leaked in the group error-correction process.

(5) The transmission unit proceeds with the next round after random permutation of the shared sifted key information. The above process is repeated until parity bits of all transceivers match.

Unlike the cascade technique, the Winnow technique can correct 1-bit errors within a group through syndrome comparison of the transceiver. Therefore, if the QBER is increased or the set group size is too large, there is a high possibility that multiple errors exist in the group, which may cause error correction to be performed at a location where no errors occur, causing errors to be amplified. In this case, more rounds of the IR process must be performed to correct the increased error due to error amplification. In addition, the winnow technique needs to share m-bit(s) of syndrome and 1-bit parity information through an open channel to correct a 2^m-long group error in which an error occurs. Since key information of m+1 bit(s) must be discarded in this process to reduce, the loss of key information is still large. In addition, this technique has a limitation that the group size cannot be freely changed according to QBER because the size of each group must be fixed to the power of 2 due to the use of the parity check matrix of the Hamming code. If the group length estimated by is not an exponential power of 2, a problem of unnecessarily increasing the amount of leaked information may occur because the IR process must be performed after adjusting to a shorter group size of an exponential power of 2 length. Lastly, in this technique, if there are multiple errors in one group, one round cannot fix all the errors in the group, and a random permutation process is performed at the start of a new round to ensure an even distribution of errors. do. Therefore, random number substitution information needs to be transmitted from the receiving unit to the transmitting unit for each round, which consumes more time in the IR process.

In this specification, Cascade and winnow techniques, which are used as the main protocols of the IR (information reconciliation) process, which is an error correction process of quantum key information during the post-processing process of existing quantum cryptographic communication, have many problems as an open channel for error correction. We deal with the improvement method for the part where additional information is leaked and the part where the throughput is low due to the large number of transmissions.

The problems of existing IR techniques are analyzed focusing on leakage information and the number of transmissions as follows.

Analysis of the problems of existing IR techniques on a single round basis:

In the IR process, the position of a group with an error is found using parity information, and thereafter, in a process such as binary search or syndrome comparison to find a detailed error position within the group, information related to key information is transmitted through an open channel. A lot of additional information is exposed through public channels. Since there is always a possibility that information disclosed through public channels may be eavesdropped by a third party, the QKD system discards the same amount of key information as the amount of leaked information in this process in order to increase the security of key information. As a result, a lot of key information is removed in the IR process, which ultimately causes a problem of lowering the key rate of quantum key information.

In relation to this, the amount of leakage information based on a single round of the existing cascade and winnow techniques is as follows.

First, in the Cascade technique, the amount of leakage information based on a single round in the parity comparison process and the binary search process is as follows. However, the amount of leaked information here is a value excluding the amount of information leaked in the traceback process.

Among the parameters in the above equation, N is the length of the entire sifted key, k is the length of a single group, and p is the QBER.

Proof)

The total amount of leakage information is divided into the amount of leakage information in the process of finding a parity error group and the process of finding an error location of an error group.

First, the number of bits leaked in the process of finding a parity error group is N/k because it is equal to dividing the entire sifted key sequence into one group length.

Next, the number of bits of leakage information in the binary search process for finding the location of errors within a group can be expressed as the product of the number of error groups capable of error correction and the parity information leaked in the process of searching for the location of errors in each group.

Probability of detecting a single group error = Probability of an odd number of errors in a single group: P_block=P_odd=(1-(1-2p)^k)/2

Number of bits used for parity comparison in binary search process: log_2(k)

The number of error groups that can be corrected = the total number of groups *

If the ratio of the amount of leaked information N_leaked^cascade to the entire sifted key length N in one round identified through this is expressed according to the group length k and QBER, the result shown in FIG. 26 can be obtained.

26 schematically shows an example of the leakage information ratio of the cascade technique according to the single-round criterion QBER and the group length.

In this case, if P_block^total, the ratio of correctable errors to all errors generated in one round, is expressed according to the group length k and QBER, the result shown in FIG. 27 can be obtained.

27 schematically shows an example of the error correction ratio of the cascade technique according to the single-round criterion QBER and the group length.

As can be seen from the results of FIG. 27 , it can be seen that not all errors can be corrected in one round, and as the group length and QBER increase, more rounds of IR processes are required to correct all errors. In addition, since leakage information for the IR process is generated at a rate as shown in FIG. 26 in each round, it can be expected that leakage information will occur at a considerably large rate compared to the amount of key information if the IR process is performed over several rounds. Considering that key information equivalent to the amount of leaked key information is removed, this causes a problem of greatly degrading the key rate.

And in one round, after one random permutation process, 1+log_2(k) information transmission is performed in the group dividing and binary search process, and this is repeated several times, so that dozens of times through open channels Since information exchange is performed, a problem of lowering throughput and latency of an IR process occurs. (Including the traceback process increases the number of information exchanges.)

Next, in the winnow technique, the amount of leakage information N_leaked^winnow based on a single round can be obtained through the sum of the amount of leak information required for parity comparison and parity group error location sharing process and the amount of leak information required for the syndrome comparison process of a group in which an error occurred.

다. 그리고 각 오류 그룹의 신드롬은 log_2(k)비트로 구성되므로 전체 누설 정보량은 N_leaked^winnow와 같음을 알 수 있다.Each process of parity comparison and parity group error location sharing generates N/k leak information, and the number of groups with errors is the same as in the cascade technique.

all. And since the syndrome of each error group consists of log_2(k) bits, it can be seen that the total amount of leaked information is equal to N_leaked^winnow.

Based on the above leakage information amount, the leakage information amount according to the length k of the group and QBER can be expressed as shown in FIG.

28 schematically shows an example of the leakage information ratio of the winnow technique according to the single-round criterion QBER and the group length.

In FIG. 28, the amount of leakage information of the cascade technique and the winnow technique is compared and marked. Since the Winnow technique can only have a group length of an exponent of 2 due to the group length limitation, comparing the amount of leak information at that point, it can be seen that it has a similar amount of leak information as the cascade method. However, since the amount of information leakage in the traceback part was excluded from the amount of leakage information of the cascade technique, the amount of leakage information of the winnow technique is expected to be smaller, considering the amount of leakage information in the process. Like the cascade technique, the Winnow technique can correct only one-bit error in one group at a time, so the same error correction ratio according to the length of the group and QBER can be obtained as shown in FIG. 27 . Therefore, even in the winnow technique, the total leakage information amount does not differ significantly from that of the cascade technique, so key information loss due to a lot of leakage information is still unavoidable. However, the binary search process of the cascade technique is changed to an error correction process through syndrome operation in the winnow technique, and in this process, the number of times information is exchanged through the open channel is reduced from log_2(k) times to once, so the number of information transmission is reduced. can be greatly reduced. However, in the winnow technique, when there are multiple errors in a group, errors can be amplified due to incorrect error correction in the IR process, unlike the cascade technique. As a result, the number of iterations of the IR process may further increase and the amount of leaked information may increase, so an improvement measure for this problem is required.

Hereinafter, for a better understanding of the examples of the present specification, the disclosure of the present specification will be described through drawings. The following drawings are made to explain a specific example of the present specification. Since the names of specific devices or names of specific signals/messages/fields described in the drawings are provided as examples, the technical features of the present specification are not limited to the specific names used in the drawings below.

29 is a flowchart of a method for determining key information according to an embodiment of the present specification.

According to FIG. 29, a device may receive parity information from another device (S2910). Since more specific details about this are as described above and/or described later, repeated description of overlapping contents will be omitted for convenience of description.

The device may estimate a quantum bit error rate (QBER) based on the parity information (S2920). Since more specific details about this are as described above and/or described later, repeated description of overlapping contents will be omitted for convenience of explanation.

The device may determine the preliminary length of the transmission group based on the estimation of the QBER (S2930). Here, the value of the reserved length for the transmission group has a value of N, and N may be a natural number. Since more specific details about this are as described above and/or described later, repeated description of overlapping contents will be omitted for convenience of description.

The device may determine the final length of the transmission group based on whether N is equal to 2^M (S2940). M may be a natural number. Since more specific details about this are as described above and/or described later, repeated description of overlapping contents will be omitted for convenience of explanation.

The device may determine the key information based on the final length of the transmission group (S2950). Since more specific details about this are as described above and/or described later, repeated description of overlapping contents will be omitted for convenience of description.

For example, when N is equal to 2^M, the value of the final length for the transmission group may have a value of 2^M. Since more specific details about this are as described above and/or described later, repeated description of overlapping contents will be omitted for convenience of description.

For example, when N is larger than 2^M but smaller than 2^(M+1), the value of the final length for the transmission group may have a value of 2^(M+1). Since more specific details about this are as described above and/or described later, repeated description of overlapping contents will be omitted for convenience of explanation.

For example, when the value of the final length has a value of 2^(M+1), 2^(M+1)-N bits in the transmission group may be filled with zeros. Since more specific details about this are as described above and/or described later, repeated description of overlapping contents will be omitted for convenience of description.

For example, when the 2^(M+1)-N bits are filled with 0's, the 2^(M+1)-N bits filled with 0's may be positioned at the end of the transmission group. Since more specific details about this are as described above and/or described later, repeated description of overlapping contents will be omitted for convenience of explanation.

For example, the device may determine the key information based on a syndrome-based information reconciliation (IR) technique. Since more specific details about this are as described above and/or described later, repeated description of overlapping contents will be omitted for convenience of explanation.

For example, the syndrome may be a multidimensional syndrome. Since more specific details about this are as described above and/or described later, repeated description of overlapping contents will be omitted for convenience of explanation.

For example, the data is transmitted through an existing communication network, the parity information is transmitted through another existing communication channel, and classical information necessary for post-processing of quantum secret key information transmitted through a quantum channel is transmitted. Since more specific details about this are as described above and/or described later, repeated description of overlapping contents will be omitted for convenience of description.

For example, the existing communication network may be a long term evolution (LTE) based communication network, a new RAT (NR) based communication network, or a wireless fidelity (WiFi) based communication network. Since more specific details about this are as described above and/or described later, repeated description of overlapping contents will be omitted for convenience of explanation.

Hereinafter, for a better understanding of the present specification, the above description will be described in more detail.

In this specification, in the information reconciliation (IR) process, which is an error correction process of key information during the post-processing process of the QKD system, it is necessary to solve the problem of the amount of leakage information of the existing IR technique and the high frequency of exchanging information through an open channel in the transceiver unit. We present a multidimensional syndrome-based IR method and apparatus for

To this end, in the above specification, first, based on the QBER obtained through QBER estimation of the QKD system, the group length with the highest probability of existence of a single error is estimated, and group size selection (group size selection) that readjusts it to the length of the power of 2 selection) technique is applied. Through this, by minimizing the existence probability when multiple errors are included in the group, the possibility of error amplification problem occurring in the syndrome error correction process of multiple errors is minimized, thereby maximizing the efficiency of the IR technique.

In addition, it solves the processing time delay problem caused by repeating the process of performing random permutation in each round for an even distribution of errors in the existing technique and sharing the location information through the public channel, and solving the problem of concatenation errors. In order to improve the error correction capability of the case, an IR technique through multi-dimensional syndrome comparison is applied.

One. Group size selection scheme according to QBER

Existing IR techniques searched for a group in which an odd number of errors occurred through parity comparison of the transmitter/receiver, and then proceeded with the IR process by applying a binary search or syndrome comparison technique capable of correcting a 1-bit error existing in the group. For this reason, if there are more errors than one error existing in the group, incorrect error correction is performed during the error correction process, and the error may rather be amplified during the IR process, or errors may not be corrected. However, even in this process, the same key information as the amount of leaked information is discarded, so by minimizing the possibility of multiple errors in a single group as much as possible, the error correction accuracy of the IR process is increased, thereby reducing the amount of leaked information consumed and thereby minimizing the loss of key information. can do.

Therefore, in this specification, based on the result of QBER estimation (estimation), a technique for minimizing the possibility of multiple errors in a single group is proposed, and the process is as follows.

(1) After sharing the key information generated by the transmitter with the receiver through quantum channels, divide the key information sequence of the receiver into groups of 8-bit (s) intervals, which is the minimum length unit of syndrome-based error correction, for accurate QBER estimation The parity value of each group is obtained. Next, the obtained parity information of the receiving unit is transmitted to the transmitting unit through the public channel.

30 schematically illustrates process (2) of the group size selection technique according to QBER.

(2) The transmitting unit obtains parity information of the same location as the receiving unit and compares it with the parity of the receiving unit to find the location of the parity group in which an odd number of errors have occurred. The QBER p of key information is estimated from the parity group error rate e_parity^est and the group length 2^m. At this time, the last bit value of each group is discarded to maintain the privacy of key information due to leaked parity information.

QBER: p=(1-(1-2e_parity^est )^(1/2^m ))/2

The process of maximizing the probability of a single error in a group from the estimated QBER is as follows.

The probability p_s of a single error being included in a single group consisting of N bits can be expressed as follows.

To maximize the probability that a single error exists in a group, p_s^'=p*(1-p)^(N-1)*(1+N*ln(1-p))=0 must be satisfied. Since p(1-p)^(N-1)≥0, the group length N satisfying 1+N*ln(1-p)=0 is derived as follows.

N=-1/ln(1-p)

In the above equation, since the group length N is determined from p, the group length can have various length values. Therefore, it is not applicable when the length N of the group with the highest single error containment probability obtained according to QBER is not an exponential power of 2. Therefore, in the past, when the group length N obtained from QBER p is in 2^m≤N≤2^(m+1), the group length had to be set to a shorter length, 2^m. Therefore, since more groups should be checked for errors, there was a problem of exposing more leaked information. In order to further solve this problem, in this specification, when the group length N obtained from QBER p is in 2^m≤N≤2^(m+1), the group length is set to 2^(m+1), and At this time, 0 is added to the key bit corresponding to 2^(m+1)-N to enable syndrome operation, and the detailed process is as follows.

(3) After the transmitting/receiving unit shares parity information obtained from the parity group divided by the changed group length N through an open channel, the transmitting unit searches for the location of a group having an error through parity comparison.

(4) The error group syndrome is obtained in the following two ways depending on whether the length of the parity group is an exponent of 2 or not.

31 schematically illustrates process A of process (3) of the group size selection technique according to QBER.

A. If the group length N is 2^m, the parity check matrix H^m and the ith quantum key group X_A^i (the last bit of 2^m is discarded due to leaky information, so it has a length of 2^m-1) Obtain the syndrome of the ith group by product.

32 schematically illustrates process B of process (3) of the group size selection scheme according to QBER.

를 통해 송신부의 신드롬을 구한다. 여기서도 A의 경우와 동일하게 2^(m+1)의 키 정보 중 마지막 비트는 누설 정보로 인해 폐기하므로 2^(m+1)-1의 길이 가진다.B. For other group lengths, when the group length N=-1/ln(1-p) obtained from QBER p is in 2^m≤N≤2^(m+1), the group length is 2^ (m+1), and all values at positions corresponding to 2^(m+1)-N are set to 0, and through this, a group of 2^(m+1) bit(s) is a single error (single error) Maintain the state with the highest probability of existence of errors. After that,

Obtain the syndrome of the transmitter through Here, as in the case of A, since the last bit of key information of 2^(m+1) is discarded due to leakage information, it has a length of 2^(m+1)-1.

33 schematically illustrates process (5) of the group size selection technique according to QBER.

(5) Among all sifted keys of the sender, the location of the group where the parity group error occurred and the syndrome value of the group are sent to the receiver through the public channel.

(6) In the receiving unit, the syndrome of the error group is obtained from the same parity check matrix as in the transmitting unit, and whether it matches the syndrome of the transmitting unit is checked.

(7) If the syndromes of the i-th transceiver group match (S_A^i=S_B^i), it is the case that the error bit is discarded after parity comparison or the case that multiple errors of 3 or more bits exist in the block, so in this case, the syndrome based error correction is not performed.

를 통해 수신부 i 번째 그룹의 error 비트를 플립한다. 이 때, 오류 정정이 이루어진 그룹에서는 에러 정정(error correction) 과정에서 누설한 정보의 프라이버시 유지를 위해 m+1 비트의 선별된(sifted) 키 정보를 추가로 버린다.However, if S_A^i≠S_B^i,

Flips the error bit of the i-th group of the receiver through At this time, in the error correction group, m+1 bit sifted key information is additionally discarded in order to maintain the privacy of information leaked in the error correction process.

(8) The transceiver performs random permutation for an even distribution of remaining errors in the shared key information, and then proceeds to the next round. The group length is reset according to the estimated QBER in each round, and as the round progresses, the number of remaining errors decreases, so the group length gradually increases. The process is repeated until the parity bit(s) of all transceivers match.

2. Multi-dimensional syndrome based IR technique

In the winnow technique, which is an existing syndrome-based IR technique, when multiple errors exist within a group in the next IR process after each round, error correction is not performed, so random permutation is used for the purpose of evenly distributing errors to each block. carry out However, for this process, substitution information must be generated using a random number calling algorithm based on TRNG (True Random Number Generator) or PRNG (Pseudo Random Number Generator) in each round, and the substitution information must be transmitted to the other party through an open channel. must do it. In addition, in the existing IR technique, it is necessary to repeat the error correction process over several rounds to correct the inconsistent key information of the transceiver. Therefore, in the process of random permutation and error correction, information exchange through dozens of public channels can improve the quality of the QKD system. A problem arises in that the processing rate is greatly reduced. Therefore, in the present specification, the random permutation process is changed to sequentially proceeding the IR process in a multi-dimensional direction, so that the existing error dispersion effect is maintained, and the time delay due to information transmission through the public channel and generation of permutation information is maintained. The number of iterations of the error correction process is minimized by eliminating the problem and maximizing the correction capability through error correction in the form of a product sign.

The detailed progress of the multidimensional syndrome comparison-based IR technique is as follows.

(1) Based on the QBER p obtained in the QBER estimation process in the same way as the first specification technique, the length of the group with the greatest possibility of containing an error of less than a single error in each group N=-1/ln(1- find p).

34 schematically illustrates process (2) of the multidimensional syndrome comparison based IR technique.

(2) Divide the L bit(s) sifted key obtained according to the group size selection method, which is the first specification technique, into groups of 2^m bit(s) larger than N, and N bits among the key values of each group All values of the remaining c positions except for are treated as 0. Through this, the length of each group is maintained at 2^m and at the same time, the possibility that an error of less than a single error is included in each group is maximized.

35 schematically illustrates process (3) of the multidimensional syndrome comparison based IR technique. Here, FIG. 35 corresponds to a schematic diagram of a quantum key information arrangement technique in the form of a multiplication code.

(3) The key information of the transceiver is reconstructed in the form of a product code as shown in FIG. One plane block has a length of 2^(m) each in width and length, and includes 2^(m)-c groups. That is, each plane consists of a sifted key (blue part) of (2^m-c)^2 bit(s) and 2^(2m)-(2^m-c)^2 bit(s) of zeros. . And, there are k-1 identical planes, and the last k-th plane has the same shape as the right plane in FIG. 35 . That is, the last k-th group contains the remaining sifted key information of L-(k-1)*(2^m-c)^2 bit(s) and 2^2m-{L-(k-1)*( It consists of 2^m-c)^2} bit(s) of zeros.

36 schematically illustrates process (4) of the multidimensional syndrome comparison based IR technique. 36 may correspond to an example of a parity calculation and comparison process in the x-axis direction in the transceiver.

(4) The receiver obtains the parity values of all planes in the X-axis direction as shown in FIG. 36, and transmits them to the transmitter through the public channel. At this time, the parity operation is performed only on 2^m-c groups containing sifted keys for each plane in the first to k-1 planes, and in the last k-th plane, groups containing sifted keys. The parity operation is performed only on Next, the transmitter finds the position of the group where the error exists through parity comparison with the receiver.

(5) The transmitter obtains the position of the parity group where the error occurred and the syndrome at that position through the multiplication of the parity check matrix, and then transmits the result to the receiver through the public channel.

(6) After obtaining the syndrome of the error group position in the receiver, it is compared with the syndrome received in the transmitter to determine whether to correct the error. If the two syndromes do not match, the error is corrected by bit flipping an error bit corresponding to the difference value S_d between the two syndromes.

37 schematically illustrates process (7) of the multidimensional syndrome comparison based IR technique. 37 may correspond to a parity calculation and comparison process in the y-axis direction in the transceiver.

(7) Next, the receiver obtains the parity values of all planes in the Y-axis direction as shown in FIG. 37, and transmits them to the transmitter through the public channel. Subsequently, the transmitter finds the position of a group having a residual error through parity comparison with the receiver.

(8) As in step 5, the transmitter transmits the location of the error group and the syndrome information of the group location to the receiver through an open channel. Subsequently, the receiving unit obtains a syndrome from the position of the error group received from the transmitting unit, and then corrects the remaining error bit information on the X-axis through an operation with the syndrome transmitted from the transmitting unit.

(9) After completing error correction through the syndromes of all k planes in the X-axis or Y-axis direction, the receiver obtains the syndromes again in all groups of the X-axis and Y-axis where errors existed in the current round, and in the previous process Determines whether all of the syndrome values of the error group sent from the transmitter are identical. If all do not match, there is a residual error, so the next round proceeds, and if all match, the syndrome of the group including the sifted key information in the X and Y axis directions for which it was determined that there is no error in the transmitter is generated. After sending all of them to the receiver through an open channel, they are compared with the syndrome in the same location of the receiver to confirm whether they match. If all the syndromes match, the IR process ends because there is no residual error. If a group with an inconsistent syndrome occurs during this process, the next round is additionally conducted.

(10) In the next round, the QBER is measured again, the group length is reset according to the remaining error ratio, and the IR process is repeated.

According to the present specification, the following expected effects may be obtained.

In this specification, a method for solving the problems of the existing technique with low throughput is presented by transmitting information through multiple public channels and a lot of leakage information generated for error correction in the IR process during the post-processing process of the QKD system. To this end, in this specification, first, a method of setting a group length based on QBER is presented to improve the error correction accuracy of the IR technique and reduce the amount of leakage information. In addition, by applying a syndrome-based IR technique in the form of a multidimensional product code, the delay problem of the IR process caused by information transmission in the performance of the existing random permutation process is eliminated, and there are multiple errors in the block including concatenation errors. By improving the error correction ability of the city, the throughput of the IR process was improved.

One. Effects of Specification Technique: Group Length Selection Technique

In the existing winnow technique, the group length can only be used as a power of 2, so if the length of the group most likely to contain a single error within a group estimated from QBER is not a power of 2, a group length of a shorter group length than that Since the IR process had to be reduced in length, more parity information leaked through the public channel. However, in the technique of this specification, in order to apply the group length estimated from QBER as it is, a group length of a larger exponential length of 2 is used and the amount of information leaked in the syndrome-based IR technique is reduced by filling components of an insufficient length with 0. made it By comparing the group length according to the QBER of the existing winnow technique and the technique of this specification, the results shown in Tables 3 to 4 can be obtained.

Winnow technique Group length QBER 8 0.11~0.06 16 0.06~0.03 32 0.03~0.015 64 0.015 to 0.007

specification technique group length QBER group length QBER group length QBER group length QBER 8 0.117503 22 0.044437 36 0.027396 50 0.019801 9 0.105161 23 0.042547 37 0.026665 51 0.019417 10 0.095163 24 0.040811 38 0.025973 52 0.019047 11 0.086899 25 0.039211 39 0.025315 53 0.018691 12 0.079956 26 0.037731 40 0.02496 54 0.018348 13 0.074039 27 0.036360 41 0.024095 55 0.018018 14 0.068937 28 0.035084 42 0.023528 56 0.017699 15 0.064493 29 0.033895 43 0.022987 57 0.017391 16 0.060587 30 0.032784 44 0.022471 58 0.017094 17 0.057127 31 0.031743 45 0.021977 59 0.016806 18 0.054041 32 0.030767 46 0.021505 60 0.016529 19 0.051271 33 0.029848 47 0.021052 61 0.01626 20 0.048771 34 0.028983 48 0.020618 62 0.016 21 0.046503 35 0.028167 49 0.020201 63 0.015748 64 0.015504

As shown in the table, in the past, all QBERs in a certain range were divided by the group length unit of a specific power of 2, but in the proposed technique, the group length can be divided according to the QBER. Therefore, since it is possible to avoid unnecessary division of groups into small units, the amount of leaked information can be reduced. For example, when a QBER of 6.4% is measured, the possibility of a single error is highest in a group length of 15 bits, but in the existing winnow technique, all of them are treated as a group length of 8 bits. Therefore, since the existing technique creates 15/8 times more groups than the technique of this specification, parity information is transmitted through an open channel 15/8 times that of the proposed technique. Therefore, in the case of the technique of the present specification, leakage information can be greatly reduced to about half through group length optimization.

2. Effects of Specification Technique: Syndrome-based IR Technique in Multi-Dimensional Form

38 schematically illustrates an error correction capability improvement effect of a multidimensional IR process.

In existing IR techniques such as the Winnow technique, the key information of the transceiver unit is matched through an iterative error correction process of several rounds. In addition, random permutation is performed for an even distribution of errors in each round, and location information of the process is transmitted through an open channel. The number of executions of this process is determined according to the QBER of the QKD system, and the number of iterations according to the QBER of the existing winnow technique is shown in Table 5 below. In Table 5, it can be seen that as the QBER increases, the error correction process is performed through more rounds, and random permutation performed at the beginning of each round occurs at least 5 times. In this specification, unlike the existing techniques, however, since the error correction process is repeatedly performed in the X-axis or Y-axis direction promised in advance by the transceiver, it is necessary to transmit the location of all key information randomly permuted through the public channel as in the existing technique. does not exist. Therefore, it is possible to reduce the number of transmissions through the public channel at least 5 times or more, and since the use of a complicated random algorithm is not required, the processing speed of the IR process can be improved. In addition, when multiple errors in the form of concatenation errors occur in one group, the effect of correcting errors that could not be corrected in one direction error correction technique in the other direction can be expected as shown in FIG. 38 through the multidimensional syndrome comparison of the present specification, IR It can improve the error-correcting ability of the technique.

QBER
(%) Group length 8 16 32 64 128 256 512 1024 One One One One 2 2 One One One 2 One 3 One One One 2 One 4 One One One 2 One 5 One One One One 2 One 6 One One One One 2 2 7 2 One One 2 One 8 2 One One 2 One 9 2 One One One 2 One 10 2 One One One One 2 One 11 3 One One 2 One

Effects obtainable through specific examples of the present specification are not limited to the effects listed above. For example, there may be various technical effects that a person having ordinary skill in the related art can understand or derive from this specification. Accordingly, the specific effects of the present specification are not limited to those explicitly described in the present specification, and may include various effects that can be understood or derived from the technical features of the present specification.

Examples of the device and other devices may be described as follows through drawings.

39 schematically illustrates an example of a device according to an embodiment of the present specification.

According to FIG. 39 , a quantum key distribution (QKD) transmitter 3910 may perform communication by being connected to a QKD receiver 3920 through a public channel and a quantum channel.

At this time, the QKD transmitter 3910 may supply the secret key to the encryptor 3930, and the QKD receiver 3920 may also supply the secret key to the decryptor 3940. Here, plain text may be input to the encryptor 3930, and the encryptor 3930 may transmit data encrypted with a secret symmetric key to the decryptor 3940 (through an existing communication network). In addition, plain text may also be output to the decoder 3940.

Here, the encrypter and the decoder can transmit/receive data through the communication network as described above, and the communication network here is, for example, a communication network in the 3GPP series (eg, an LTE/LTE-A/NR based communication network), an IEEE series It may also mean a communication network in .

Meanwhile, the encryptor 3930 and the QKD transmitter 3910 may be included in one device 3950, and the decryptor 3940 and the QKD receiver 3920 may also be included in one device 3960.

For reference, in the drawing, for convenience of description, a configuration including only the encryptor 3930 and the QKD transmitter 3910 is illustrated in one device 3950, but the QKD transmitter 3910 is included in the one device 3950 and an encryptor 3930 as well as a separate decryptor may also be included. Similarly, a decoder 3940 and a QKD receiver 3920 as well as a separate encoder may also be included in one device 3960.

Hereinafter, for a better understanding of the examples of the present specification, the disclosure of the present specification will be described through drawings. The following drawings are made to explain a specific example of the present specification. Since the names of specific devices or names of specific signals/messages/fields described in the drawings are provided as examples, the technical features of the present specification are not limited to the specific names used in the drawings below.

40 is a flowchart of a method of determining key information according to another embodiment of the present specification.

According to FIG. 40, a device may transmit a random access (RA) preamble to another device (S4010). Since more specific details about this are as described above and/or described later, repeated description of overlapping contents will be omitted for convenience of explanation.

The device may receive a random access response (RAR) from the other device in response to the RA preamble (S4020). Since more specific details about this are as described above and/or described later, repeated description of overlapping contents will be omitted for convenience of description.

The device may perform a radio resource control (RRC) connection procedure with the other device (S4030). Since more specific details about this are as described above and/or described later, repeated description of overlapping contents will be omitted for convenience of explanation.

The device may encode data based on the key information (S4040). Since more specific details about this are as described above and/or described later, repeated description of overlapping contents will be omitted for convenience of explanation.

The device may transmit the data to the other device (S4050). Since more specific details about this are as described above and/or described later, repeated description of overlapping contents will be omitted for convenience of description.

The key information includes the device receiving parity information from the other device, the device estimating a quantum bit error rate (QBER) based on the parity information, and the device performing a transmission group based on the estimation of the QBER. Determines the preliminary length of the transmission group, wherein the value of the preliminary length for the transmission group has a value of N, where N is a natural number, and the device determines the final length of the transmission group based on whether N is equal to 2^M. The length is determined, but the M may be determined based on a natural number. Since more specific details about this are as described above and/or described later, repeated description of overlapping contents will be omitted for convenience of explanation.

Hereinafter, the embodiments of the present specification will be repeatedly described from the subject point of view of various operations.

41 is a flowchart of a method for determining key information from a device perspective, according to an embodiment of the present specification.

The device may receive parity information from the other device (S4110). Since more specific details about this are as described above and/or described later, repeated description of overlapping contents will be omitted for convenience of explanation.

The device may estimate a quantum bit error rate (QBER) based on the parity information (S4120). Since more specific details about this are as described above and/or described later, repeated description of overlapping contents will be omitted for convenience of explanation.

The device may determine the preliminary length of the transmission group based on the estimation of the QBER (S4130). The value of the reserved length for the transmission group has a value of N, and N may be a natural number. Since more specific details about this are as described above and/or described later, repeated description of overlapping contents will be omitted for convenience of explanation.

The device may determine the final length of the transmission group based on whether N is equal to 2^M (S4140). M may be a natural number. Since more specific details about this are as described above and/or described later, repeated description of overlapping contents will be omitted for convenience of description.

The device may determine the key information based on the final length of the transmission group (S4150). Since more specific details about this are as described above and/or described later, repeated description of overlapping contents will be omitted for convenience of explanation.

42 is a block diagram of an example of an apparatus for determining key information, from a device perspective, according to an embodiment of the present specification.

According to FIG. 42 , the processor 4200 may include an information receiving unit 4210, a QBER estimation unit 4220, a preliminary length determining unit 4230, a final length determining unit 4240, and a key information determining unit 4250. can Here, the processor may be the processor in FIGS. 45 to 55 to be described later.

The information receiving unit 4210 may be configured to receive parity information from the other device. Since more specific details about this are as described above and/or described later, repeated description of overlapping contents will be omitted for convenience of description.

The QBER estimator 4220 may be configured to estimate a quantum bit error rate (QBER) based on the parity information. Since more specific details about this are as described above and/or described later, repeated description of overlapping contents will be omitted for convenience of description.

The preliminary length determining unit 4230 may be configured to determine the preliminary length of the transmission group based on the estimation of the QBER. The value of the reserved length for the transmission group has a value of N, and N may be a natural number. Since more specific details about this are as described above and/or described later, repeated description of overlapping contents will be omitted for convenience of description.

The final length determination unit 4240 may be configured to determine the final length of the transmission group based on whether N is equal to 2^M. M may be a natural number. Since more specific details about this are as described above and/or described later, repeated description of overlapping contents will be omitted for convenience of description.

The key information determination unit 4250 may be configured to determine the key information based on the final length of the transmission group. Since more specific details about this are as described above and/or described later, repeated description of overlapping contents will be omitted for convenience of explanation.

Although not shown separately, embodiments of the present specification may also provide the following configuration.

According to one embodiment, an apparatus includes a transceiver, at least one memory, and at least one processor operably coupled with the at least one memory and the transceiver, the processor comprising: random access (RA) to another device. configured to control the transceiver to transmit a preamble, configured to control the transceiver to receive a random access response (RAR) from the other device in response to the RA preamble, and radio resource control (RRC) with the other device ) configured to perform a connection procedure, configured to encode data based on key information, and configured to transmit the data to the other device, wherein the key information includes the device receiving parity information from the other device and , The device estimates a quantum bit error rate (QBER) based on the parity information, and the device determines a preliminary length of a transmission group based on the estimation of the QBER, wherein the value of the preliminary length for the transmission group is It has a value of N, wherein N is a natural number and the device determines the final length of the transmission group based on whether N is equal to 2^M, wherein M is a natural number. It may be a device that

According to another embodiment of the present specification, a device includes at least one memory and at least one processor operably coupled to the at least one memory, wherein the processor transmits a random access (RA) preamble to another device. configured to control the transceiver to transmit, configured to control the transceiver to receive a random access response (RAR) from the other device in response to the RA preamble, and radio resource control (RRC) connection procedure with the other device configured to perform, configured to encode data based on key information and configured to transmit the data to the other device, wherein the key information is configured so that the device receives parity information from the other device, and the device Estimates a quantum bit error rate (QBER) based on the parity information, and the device determines a preliminary length of a transmission group based on the estimation of the QBER, wherein the value of the preliminary length for the transmission group is a value of N wherein N is a natural number and the device determines the final length of the transmission group based on whether N is equal to 2^M, wherein M is a natural number. can be

According to another embodiment of the present specification, in at least one computer readable medium including instructions based on being executed by at least one processor, another configured to control a transceiver to transmit a random access (RA) preamble to a device, and configured to control the transceiver to receive a random access response (RAR) from the other device in response to the RA preamble, the other device And configured to perform a radio resource control (RRC) connection procedure, configured to encode data based on key information, and configured to transmit the data to the other device, wherein the key information, the at least one processor configured to control the transceiver to receive parity information from the other device, wherein the at least one processor is configured to estimate a quantum bit error rate (QBER) based on the parity information, wherein the at least one processor configures the QBER Wherein the value of the reserved length for the transmission group has a value of N, where N is a natural number, and the at least one processor determines the reserve length of the transmission group based on an estimate of It is configured to determine the final length of the transmission group based on whether it is equal to, but the M may be a recording medium characterized in that it is determined based on a natural number.

43 is a flowchart of a method of determining key information from the viewpoint of another device according to an embodiment of the present specification.

According to FIG. 43, the device may decrypt data based on key information (S4310). Here, the key information is determined based on the length of a transmission group having a length of 2^M, and M may be a natural number. Since more specific details about this are as described above and/or described later, repeated description of overlapping contents will be omitted for convenience of description.

44 is a block diagram of an example of an apparatus for determining key information from another apparatus perspective, according to an embodiment of the present specification.

According to FIG. 44 , the processor 4400 may include a decoder 4410. Here, the processor may be the processor in FIGS. 45 to 55 to be described later.

The decryption unit 4410 may be configured to decrypt data based on key information. Here, the key information is determined based on the length of a transmission group having a length of 2^M, and M may be a natural number. Since more specific details about this are as described above and/or described later, repeated description of overlapping contents will be omitted for convenience of explanation.

45 illustrates the communication system 1 applied to this specification.

Referring to FIG. 45, a communication system 1 applied to this specification includes a wireless device, a base station, and a network. Here, the wireless device means a device that performs communication using a radio access technology (eg, 5G New RAT (NR), Long Term Evolution (LTE)), and may be referred to as a communication/wireless/5G device. Although not limited thereto, wireless devices include robots 100a, vehicles 100b-1 and 100b-2, XR (eXtended Reality) devices 100c, hand-held devices 100d, and home appliances 100e. ), an Internet of Thing (IoT) device 100f, and an AI device/server 400. For example, the vehicle may include a vehicle equipped with a wireless communication function, an autonomous vehicle, a vehicle capable of performing inter-vehicle communication, and the like. Here, the vehicle may include an Unmanned Aerial Vehicle (UAV) (eg, a drone). XR devices include Augmented Reality (AR)/Virtual Reality (VR)/Mixed Reality (MR) devices, Head-Mounted Devices (HMDs), Head-Up Displays (HUDs) installed in vehicles, televisions, smartphones, It may be implemented in the form of a computer, wearable device, home appliance, digital signage, vehicle, robot, and the like. A portable device may include a smart phone, a smart pad, a wearable device (eg, a smart watch, a smart glass), a computer (eg, a laptop computer, etc.), and the like. Home appliances may include a TV, a refrigerator, a washing machine, and the like. IoT devices may include sensors, smart meters, and the like. For example, a base station and a network may also be implemented as a wireless device, and a specific wireless device 200a may operate as a base station/network node to other wireless devices.

Here, the wireless communication technology implemented in the wireless device of the present specification may include Narrowband Internet of Things for low power communication as well as LTE, NR, and 6G. At this time, for example, NB-IoT technology may be an example of LPWAN (Low Power Wide Area Network) technology, and may be implemented in standards such as LTE Cat NB1 and / or LTE Cat NB2. no. Additionally or alternatively, the wireless communication technology implemented in the wireless device of the present specification may perform communication based on LTE-M technology. At this time, as an example, LTE-M technology may be an example of LPWAN technology, and may be called various names such as eMTC (enhanced machine type communication). For example, LTE-M technologies are 1) LTE CAT 0, 2) LTE Cat M1, 3) LTE Cat M2, 4) LTE non-BL (non-Bandwidth Limited), 5) LTE-MTC, 6) LTE Machine Type Communication, and/or 7) It may be implemented in at least one of various standards such as LTE M, and is not limited to the above-mentioned names. Additionally or alternatively, the wireless communication technology implemented in the wireless device of the present specification may include at least one of ZigBee, Bluetooth, and Low Power Wide Area Network (LPWAN) considering low power communication. It may be, and is not limited to the above-mentioned names. For example, ZigBee technology can generate personal area networks (PANs) related to small/low-power digital communication based on various standards such as IEEE 802.15.4, and can be called various names.

The wireless devices 100a to 100f may be connected to the network 300 through the base station 200 . AI (Artificial Intelligence) technology may be applied to the wireless devices 100a to 100f, and the wireless devices 100a to 100f may be connected to the AI server 400 through the network 300. The network 300 may be configured using a 3G network, a 4G (eg LTE) network, or a 5G (eg NR) network. The wireless devices 100a to 100f may communicate with each other through the base station 200/network 300, but may also communicate directly (eg, sidelink communication) without going through the base station/network. For example, the vehicles 100b-1 and 100b-2 may perform direct communication (eg, vehicle to vehicle (V2V)/vehicle to everything (V2X) communication). In addition, IoT devices (eg, sensors) may directly communicate with other IoT devices (eg, sensors) or other wireless devices 100a to 100f.

Wireless communication/connection 150a, 150b, and 150c may be performed between the wireless devices 100a to 100f/base station 200 and the base station 200/base station 200. Here, wireless communication/connection refers to various wireless connections such as uplink/downlink communication 150a, sidelink communication 150b (or D2D communication), and inter-base station communication 150c (e.g. relay, Integrated Access Backhaul (IAB)). This can be achieved through technology (eg, 5G NR) Wireless communication/connection (150a, 150b, 150c) allows wireless devices and base stations/wireless devices, and base stations and base stations to transmit/receive radio signals to/from each other. For example, the wireless communication/connection 150a, 150b, and 150c may transmit/receive signals through various physical channels.To this end, based on various proposals of the present specification, for transmission/reception of radio signals At least some of various configuration information setting processes, various signal processing processes (eg, channel encoding/decoding, modulation/demodulation, resource mapping/demapping, etc.), resource allocation processes, etc. may be performed.

Meanwhile, NR supports a number of numerologies (or subcarrier spacing (SCS)) to support various 5G services. For example, when the SCS is 15 kHz, it supports a wide area in traditional cellular bands, and when the SCS is 30 kHz/60 kHz, dense-urban, lower latency and a wider carrier bandwidth, and when the SCS is 60 kHz or higher, a bandwidth greater than 24.25 GHz is supported to overcome phase noise.

The NR frequency band may be defined as a frequency range of two types (FR1 and FR2). The number of frequency ranges may be changed, and for example, the frequency ranges of the two types (FR1 and FR2) may be shown in Table 6 below. For convenience of explanation, among the frequency ranges used in the NR system, FR1 may mean "sub 6 GHz range" and FR2 may mean "above 6 GHz range" and may be called millimeter wave (mmW) .

Frequency range designation Corresponding frequency range Subcarrier Spacing FR1 450MHz - 6000MHz 15, 30, 60 kHz FR2 24250MHz - 52600MHz 60, 120, 240 kHz

As described above, the number of frequency ranges of the NR system can be changed. For example, FR1 may include a band of 410 MHz to 7125 MHz as shown in Table 7 below. That is, FR1 may include a frequency band of 6 GHz (or 5850, 5900, 5925 MHz, etc.) or higher. For example, a frequency band of 6 GHz (or 5850, 5900, 5925 MHz, etc.) or higher included in FR1 may include an unlicensed band. The unlicensed band may be used for various purposes, and may be used, for example, for vehicle communication (eg, autonomous driving).

Frequency range designation Corresponding frequency range Subcarrier Spacing FR1 410MHz - 7125MHz 15, 30, 60 kHz FR2 24250MHz - 52600MHz 60, 120, 240 kHz

Hereinafter, an example of a wireless device to which the present specification is applied will be described. FIG. 46 illustrates a wireless device to which the present specification can be applied.

Referring to FIG. 46 , the first wireless device 100 and the second wireless device 200 may transmit and receive radio signals through various radio access technologies (eg, LTE, NR). Here, {the first wireless device 100, the second wireless device 200} is the {wireless device 100x, the base station 200} of FIG. 45 and/or the {wireless device 100x, the wireless device 100x. } can correspond.

The first wireless device 100 includes one or more processors 102 and one or more memories 104, and may additionally include one or more transceivers 106 and/or one or more antennas 108. The processor 102 controls the memory 104 and/or the transceiver 106 and may be configured to implement the descriptions, functions, procedures, suggestions, methods and/or flowcharts of operations disclosed herein. For example, the processor 102 may process information in the memory 104 to generate first information/signal, and transmit a radio signal including the first information/signal through the transceiver 106. In addition, the processor 102 may receive a radio signal including the second information/signal through the transceiver 106, and then store information obtained from signal processing of the second information/signal in the memory 104. The memory 104 may be connected to the processor 102 and may store various information related to the operation of the processor 102 . For example, memory 104 may perform some or all of the processes controlled by processor 102, or instructions for performing the descriptions, functions, procedures, suggestions, methods, and/or flowcharts of operations disclosed herein. It may store software codes including them. Here, the processor 102 and memory 104 may be part of a communication modem/circuit/chip designed to implement a wireless communication technology (eg, LTE, NR). The transceiver 106 may be coupled to the processor 102 and may transmit and/or receive wireless signals via one or more antennas 108 . The transceiver 106 may include a transmitter and/or a receiver. The transceiver 106 may be used interchangeably with a radio frequency (RF) unit. In this specification, a wireless device may mean a communication modem/circuit/chip.

The second wireless device 200 includes one or more processors 202, one or more memories 204, and may further include one or more transceivers 206 and/or one or more antennas 208. Processor 202 controls memory 204 and/or transceiver 206 and may be configured to implement the descriptions, functions, procedures, suggestions, methods, and/or flowcharts of operations disclosed herein. For example, the processor 202 may process information in the memory 204 to generate third information/signal, and transmit a radio signal including the third information/signal through the transceiver 206. In addition, the processor 202 may receive a radio signal including the fourth information/signal through the transceiver 206 and store information obtained from signal processing of the fourth information/signal in the memory 204 . The memory 204 may be connected to the processor 202 and may store various information related to the operation of the processor 202 . For example, memory 204 may perform some or all of the processes controlled by processor 202, or instructions for performing the descriptions, functions, procedures, suggestions, methods, and/or flowcharts of operations disclosed herein. It may store software codes including them. Here, the processor 202 and memory 204 may be part of a communication modem/circuit/chip designed to implement a wireless communication technology (eg, LTE, NR). The transceiver 206 may be coupled to the processor 202 and may transmit and/or receive wireless signals via one or more antennas 208 . The transceiver 206 may include a transmitter and/or a receiver. The transceiver 206 may be used interchangeably with an RF unit. In this specification, a wireless device may mean a communication modem/circuit/chip.

Hereinafter, hardware elements of the wireless devices 100 and 200 will be described in more detail. Although not limited to this, one or more protocol layers may be implemented by one or more processors 102, 202. For example, one or more processors 102, 202 may implement one or more layers (eg, functional layers such as PHY, MAC, RLC, PDCP, RRC, SDAP). One or more processors 102, 202 may generate one or more Protocol Data Units (PDUs) and/or one or more Service Data Units (SDUs) in accordance with the descriptions, functions, procedures, proposals, methods and/or operational flow charts disclosed herein. can create One or more processors 102, 202 may generate messages, control information, data or information according to the descriptions, functions, procedures, proposals, methods and/or operational flow diagrams disclosed herein. One or more processors 102, 202 generate PDUs, SDUs, messages, control information, data or signals (e.g., baseband signals) containing information according to the functions, procedures, proposals and/or methods disclosed herein , can be provided to one or more transceivers 106, 206. One or more processors 102, 202 may receive signals (eg, baseband signals) from one or more transceivers 106, 206, and descriptions, functions, procedures, proposals, methods, and/or flowcharts of operations disclosed herein PDUs, SDUs, messages, control information, data or information can be obtained according to these.

One or more processors 102, 202 may be referred to as a controller, microcontroller, microprocessor or microcomputer. One or more processors 102, 202 may be implemented by hardware, firmware, software, or a combination thereof. For example, one or more Application Specific Integrated Circuits (ASICs), one or more Digital Signal Processors (DSPs), one or more Digital Signal Processing Devices (DSPDs), one or more Programmable Logic Devices (PLDs), or one or more Field Programmable Gate Arrays (FPGAs). may be included in one or more processors 102 and 202. The descriptions, functions, procedures, proposals, methods and/or operational flowcharts disclosed in this document may be implemented using firmware or software, and the firmware or software may be implemented to include modules, procedures, functions, and the like. Firmware or software configured to perform the descriptions, functions, procedures, suggestions, methods and/or operational flow diagrams disclosed herein may be included in one or more processors 102, 202 or stored in one or more memories 104, 204 and It can be driven by the above processors 102 and 202. The descriptions, functions, procedures, suggestions, methods and/or operational flow charts disclosed in this document may be implemented using firmware or software in the form of codes, instructions and/or sets of instructions.

One or more memories 104, 204 may be coupled with one or more processors 102, 202 and may store various types of data, signals, messages, information, programs, codes, instructions and/or instructions. One or more memories 104, 204 may be comprised of ROM, RAM, EPROM, flash memory, hard drives, registers, cache memory, computer readable storage media, and/or combinations thereof. One or more memories 104, 204 may be located internally and/or external to one or more processors 102, 202. Additionally, one or more memories 104, 204 may be coupled to one or more processors 102, 202 through various technologies, such as wired or wireless connections.

One or more transceivers 106, 206 may transmit user data, control information, radio signals/channels, etc., as referred to in the methods and/or operational flow charts herein, to one or more other devices. One or more transceivers 106, 206 may receive user data, control information, radio signals/channels, etc. referred to in descriptions, functions, procedures, proposals, methods and/or operational flow charts, etc. disclosed herein from one or more other devices. there is. For example, one or more transceivers 106 and 206 may be connected to one or more processors 102 and 202 and transmit and receive wireless signals. For example, one or more processors 102, 202 may control one or more transceivers 106, 206 to transmit user data, control information, or radio signals to one or more other devices. Additionally, one or more processors 102, 202 may control one or more transceivers 106, 206 to receive user data, control information, or radio signals from one or more other devices. In addition, one or more transceivers 106, 206 may be coupled with one or more antennas 108, 208, and one or more transceivers 106, 206 via one or more antennas 108, 208, as described herein, function. , procedures, proposals, methods and / or operation flowcharts, etc. can be set to transmit and receive user data, control information, radio signals / channels, etc. In this document, one or more antennas may be a plurality of physical antennas or a plurality of logical antennas (eg, antenna ports). One or more transceivers (106, 206) convert the received radio signals/channels from RF band signals in order to process the received user data, control information, radio signals/channels, etc. using one or more processors (102, 202). It can be converted into a baseband signal. One or more transceivers 106 and 206 may convert user data, control information, and radio signals/channels processed by one or more processors 102 and 202 from baseband signals to RF band signals. To this end, one or more of the transceivers 106, 206 may include (analog) oscillators and/or filters.

47 shows another example of a wireless device that can be applied to this specification.

47, a wireless device may include at least one processor 102, 202, at least one memory 104, 204, at least one transceiver 106, 206, and one or more antennas 108, 208. there is.

As a difference between the example of the wireless device described above in FIG. 46 and the example of the wireless device in FIG. 47, the processors 102 and 202 and the memories 104 and 204 are separated in FIG. 46, but in the example of FIG. 47, the processor Note that (102, 202) includes the memory (104, 204).

Here, since the detailed description of the processors 102 and 202, the memories 104 and 204, the transceivers 106 and 206, and one or more antennas 108 and 208 have been described above, in order to avoid repetition of unnecessary description, Description of repeated description is omitted.

Hereinafter, an example of a signal processing circuit to which the present specification is applied will be described.

48 illustrates a signal processing circuit for a transmission signal.

Referring to FIG. 48 , the signal processing circuit 1000 may include a scrambler 1010, a modulator 1020, a layer mapper 1030, a precoder 1040, a resource mapper 1050, and a signal generator 1060. there is. Although not limited to this, the operations/functions of FIG. 48 may be performed by processors 102 and 202 and/or transceivers 106 and 206 of FIG. 46 . The hardware elements of FIG. 48 may be implemented in processors 102 and 202 and/or transceivers 106 and 206 of FIG. 46 . For example, blocks 1010-1060 may be implemented in processors 102 and 202 of FIG. 46 . Also, blocks 1010 to 1050 may be implemented in the processors 102 and 202 of FIG. 46 , and block 1060 may be implemented in the transceivers 106 and 206 of FIG. 46 .

The codeword may be converted into a radio signal through the signal processing circuit 1000 of FIG. 48 . Here, a codeword is an encoded bit sequence of an information block. Information blocks may include transport blocks (eg, UL-SCH transport blocks, DL-SCH transport blocks). Radio signals may be transmitted through various physical channels (eg, PUSCH, PDSCH).

Specifically, the codeword may be converted into a scrambled bit sequence by the scrambler 1010. A scramble sequence used for scrambling is generated based on an initialization value, and the initialization value may include ID information of a wireless device. The scrambled bit sequence may be modulated into a modulation symbol sequence by modulator 1020. The modulation scheme may include pi/2-Binary Phase Shift Keying (pi/2-BPSK), m-Phase Shift Keying (m-PSK), m-Quadrature Amplitude Modulation (m-QAM), and the like. The complex modulation symbol sequence may be mapped to one or more transport layers by the layer mapper 1030. Modulation symbols of each transport layer may be mapped to the corresponding antenna port(s) by the precoder 1040 (precoding). The output z of the precoder 1040 can be obtained by multiplying the output y of the layer mapper 1030 by the N*M precoding matrix W. Here, N is the number of antenna ports and M is the number of transport layers. Here, the precoder 1040 may perform precoding after performing transform precoding (eg, DFT transformation) on complex modulation symbols. Also, the precoder 1040 may perform precoding without performing transform precoding.

The resource mapper 1050 may map modulation symbols of each antenna port to time-frequency resources. The time-frequency resource may include a plurality of symbols (eg, CP-OFDMA symbols and DFT-s-OFDMA symbols) in the time domain and a plurality of subcarriers in the frequency domain. The signal generator 1060 generates a radio signal from the mapped modulation symbols, and the generated radio signal can be transmitted to other devices through each antenna. To this end, the signal generator 1060 may include an inverse fast Fourier transform (IFFT) module, a cyclic prefix (CP) inserter, a digital-to-analog converter (DAC), a frequency uplink converter, and the like. .

The signal processing process for the received signal in the wireless device may be configured in reverse to the signal processing process 1010 to 1060 of FIG. 48 . For example, wireless devices (eg, 100 and 200 of FIG. 46 ) may receive a wireless signal from the outside through an antenna port/transceiver. The received radio signal may be converted into a baseband signal through a signal restorer. To this end, the signal restorer may include a frequency downlink converter, an analog-to-digital converter (ADC), a CP remover, and a fast Fourier transform (FFT) module. Thereafter, the baseband signal may be restored to a codeword through a resource de-mapper process, a postcoding process, a demodulation process, and a de-scramble process. The codeword may be restored to an original information block through decoding. Accordingly, a signal processing circuit (not shown) for a received signal may include a signal restorer, a resource demapper, a postcoder, a demodulator, a descrambler, and a decoder.

Hereinafter, an example of using a wireless device to which the present specification is applied will be described.

49 shows another example of a wireless device applied to this specification. A wireless device may be implemented in various forms according to usage-examples/services (see FIG. 45).

Referring to FIG. 49, wireless devices 100 and 200 correspond to the wireless devices 100 and 200 of FIG. 46, and include various elements, components, units/units, and/or modules. ) can be configured. For example, the wireless devices 100 and 200 may include a communication unit 110 , a control unit 120 , a memory unit 130 and an additional element 140 . The communication unit may include communication circuitry 112 and transceiver(s) 114 . For example, communication circuitry 112 may include one or more processors 102, 202 of FIG. 46 and/or one or more memories 104, 204. For example, transceiver(s) 114 may include one or more transceivers 106, 206 of FIG. 46 and/or one or more antennas 108, 208. The control unit 120 is electrically connected to the communication unit 110, the memory unit 130, and the additional element 140 and controls overall operations of the wireless device. For example, the control unit 120 may control electrical/mechanical operations of the wireless device based on programs/codes/commands/information stored in the memory unit 130. In addition, the controller 120 transmits the information stored in the memory unit 130 to the outside (eg, another communication device) through the communication unit 110 through a wireless/wired interface, or transmits the information stored in the memory unit 130 to the outside (eg, another communication device) through the communication unit 110. Information received through a wireless/wired interface from other communication devices) may be stored in the memory unit 130 .

The additional element 140 may be configured in various ways according to the type of wireless device. For example, the additional element 140 may include at least one of a power unit/battery, an I/O unit, a driving unit, and a computing unit. Although not limited thereto, wireless devices include robots (Fig. 45, 100a), vehicles (Figs. (FIG. 45, 100e), IoT device (FIG. 45, 100f), digital broadcasting terminal, hologram device, public safety device, MTC device, medical device, fintech device (or financial device), security device, climate/environmental device, It may be implemented in the form of an AI server/device (Fig. 45, 400), a base station (Fig. 45, 200), a network node, and the like. Wireless devices can be mobile or used in a fixed location depending on the use-case/service.

In FIG. 49, various elements, components, units/units, and/or modules in the wireless devices 100 and 200 may be entirely interconnected through a wired interface or at least partially connected wirelessly through the communication unit 110. For example, in the wireless devices 100 and 200, the control unit 120 and the communication unit 110 are connected by wire, and the control unit 120 and the first units (eg, 130 and 140) are connected through the communication unit 110. Can be connected wirelessly. Additionally, each element, component, unit/unit, and/or module within the wireless device 100, 200 may further include one or more elements. For example, the control unit 120 may be composed of one or more processor sets. For example, the controller 120 may include a set of a communication control processor, an application processor, an electronic control unit (ECU), a graphic processing processor, a memory control processor, and the like. As another example, the memory unit 130 may include random access memory (RAM), dynamic RAM (DRAM), read only memory (ROM), flash memory, volatile memory, and non-volatile memory. volatile memory) and/or a combination thereof.

Hereinafter, an implementation example of FIG. 49 will be described in more detail with reference to drawings.

50 illustrates a portable device applied to this specification. A portable device may include a smart phone, a smart pad, a wearable device (eg, a smart watch, a smart glass), and a portable computer (eg, a laptop computer). A mobile device may be referred to as a mobile station (MS), a user terminal (UT), a mobile subscriber station (MSS), a subscriber station (SS), an advanced mobile station (AMS), or a wireless terminal (WT).

Referring to FIG. 50, a portable device 100 includes an antenna unit 108, a communication unit 110, a control unit 120, a memory unit 130, a power supply unit 140a, an interface unit 140b, and an input/output unit 140c. ) may be included. The antenna unit 108 may be configured as part of the communication unit 110 . Blocks 110 to 130/140a to 140c respectively correspond to blocks 110 to 130/140 of FIG. 49 .

The communication unit 110 may transmit/receive signals (eg, data, control signals, etc.) with other wireless devices and base stations. The controller 120 may perform various operations by controlling components of the portable device 100 . The control unit 120 may include an application processor (AP). The memory unit 130 may store data/parameters/programs/codes/commands necessary for driving the portable device 100 . In addition, the memory unit 130 may store input/output data/information. The power supply unit 140a supplies power to the portable device 100 and may include a wired/wireless charging circuit, a battery, and the like. The interface unit 140b may support connection between the portable device 100 and other external devices. The interface unit 140b may include various ports (eg, audio input/output ports and video input/output ports) for connection with external devices. The input/output unit 140c may receive or output image information/signal, audio information/signal, data, and/or information input from a user. The input/output unit 140c may include a camera, a microphone, a user input unit, a display unit 140d, a speaker, and/or a haptic module.

For example, in the case of data communication, the input/output unit 140c obtains information/signals (eg, touch, text, voice, image, video) input from the user, and the acquired information/signals are stored in the memory unit 130. can be stored The communication unit 110 may convert the information/signal stored in the memory into a wireless signal, and directly transmit the converted wireless signal to another wireless device or to a base station. In addition, the communication unit 110 may receive a radio signal from another wireless device or a base station and then restore the received radio signal to original information/signal. After the restored information/signal is stored in the memory unit 130, it may be output in various forms (eg, text, voice, image, video, haptic) through the input/output unit 140c.

51 illustrates a vehicle or an autonomous vehicle applied in this specification.

Vehicles or autonomous vehicles may be implemented as mobile robots, vehicles, trains, manned/unmanned aerial vehicles (AVs), ships, and the like.

Referring to FIG. 51 , a vehicle or autonomous vehicle 100 includes an antenna unit 108, a communication unit 110, a control unit 120, a driving unit 140a, a power supply unit 140b, a sensor unit 140c, and an autonomous driving unit. A portion 140d may be included. The antenna unit 108 may be configured as part of the communication unit 110 . Blocks 110/130/140a to 140d correspond to blocks 110/130/140 of FIG. 49 , respectively.

The communication unit 110 may transmit/receive signals (eg, data, control signals, etc.) with external devices such as other vehicles, base stations (e.g. base stations, roadside base stations, etc.), servers, and the like. The controller 120 may perform various operations by controlling elements of the vehicle or autonomous vehicle 100 . The controller 120 may include an Electronic Control Unit (ECU). The driving unit 140a may drive the vehicle or autonomous vehicle 100 on the ground. The driving unit 140a may include an engine, a motor, a power train, a wheel, a brake, a steering device, and the like. The power supply unit 140b supplies power to the vehicle or autonomous vehicle 100, and may include a wired/wireless charging circuit, a battery, and the like. The sensor unit 140c may obtain vehicle conditions, surrounding environment information, and user information. The sensor unit 140c includes an inertial measurement unit (IMU) sensor, a collision sensor, a wheel sensor, a speed sensor, an inclination sensor, a weight detection sensor, a heading sensor, a position module, and a vehicle forward. /Can include a reverse sensor, battery sensor, fuel sensor, tire sensor, steering sensor, temperature sensor, humidity sensor, ultrasonic sensor, illuminance sensor, pedal position sensor, and the like. The autonomous driving unit 140d includes a technology for maintaining a driving lane, a technology for automatically adjusting speed such as adaptive cruise control, a technology for automatically driving along a predetermined route, and a technology for automatically setting a route when a destination is set and driving. technology can be implemented.

For example, the communication unit 110 may receive map data, traffic information data, and the like from an external server. The autonomous driving unit 140d may generate an autonomous driving route and a driving plan based on the acquired data. The controller 120 may control the driving unit 140a so that the vehicle or autonomous vehicle 100 moves along the autonomous driving path according to the driving plan (eg, speed/direction adjustment). During autonomous driving, the communicator 110 may non-/periodically obtain the latest traffic information data from an external server and obtain surrounding traffic information data from surrounding vehicles. In addition, during autonomous driving, the sensor unit 140c may acquire vehicle state and surrounding environment information. The autonomous driving unit 140d may update an autonomous driving route and a driving plan based on newly acquired data/information. The communication unit 110 may transmit information about a vehicle location, an autonomous driving route, a driving plan, and the like to an external server. The external server may predict traffic information data in advance using AI technology based on information collected from the vehicle or self-driving vehicles, and may provide the predicted traffic information data to the vehicle or self-driving vehicles.

52 illustrates a vehicle applied in this specification. A vehicle may be implemented as a means of transportation, a train, an air vehicle, a ship, and the like.

Referring to FIG. 52 , the vehicle 100 may include a communication unit 110, a control unit 120, a memory unit 130, an input/output unit 140a, and a position measuring unit 140b. Here, blocks 110 to 130/140a to 140b correspond to blocks 110 to 130/140 of FIG. X3, respectively.

The communication unit 110 may transmit/receive signals (eg, data, control signals, etc.) with other vehicles or external devices such as base stations. The controller 120 may perform various operations by controlling components of the vehicle 100 . The memory unit 130 may store data/parameters/programs/codes/commands supporting various functions of the vehicle 100 . The input/output unit 140a may output an AR/VR object based on information in the memory unit 130. The input/output unit 140a may include a HUD. The location measurement unit 140b may obtain location information of the vehicle 100 . The location information may include absolute location information of the vehicle 100, location information within a driving line, acceleration information, and location information with neighboring vehicles. The location measuring unit 140b may include GPS and various sensors.

For example, the communication unit 110 of the vehicle 100 may receive map information, traffic information, and the like from an external server and store them in the memory unit 130 . The location measurement unit 140b may acquire vehicle location information through GPS and various sensors and store it in the memory unit 130 . The controller 120 may generate a virtual object based on map information, traffic information, vehicle location information, etc., and the input/output unit 140a may display the created virtual object on a window in the vehicle (1410, 1420). In addition, the controller 120 may determine whether the vehicle 100 is normally operated within the driving line based on the vehicle location information. When the vehicle 100 abnormally deviate from the driving line, the controller 120 may display a warning on a window in the vehicle through the input/output unit 140a. In addition, the controller 120 may broadcast a warning message about driving abnormality to surrounding vehicles through the communication unit 110 . Depending on circumstances, the controller 120 may transmit vehicle location information and information on driving/vehicle abnormalities to related agencies through the communication unit 110 .

53 illustrates an XR device applied herein. The XR device may be implemented as an HMD, a head-up display (HUD) provided in a vehicle, a television, a smartphone, a computer, a wearable device, a home appliance, a digital signage, a vehicle, a robot, and the like.

Referring to FIG. 53, the XR device 100a may include a communication unit 110, a control unit 120, a memory unit 130, an input/output unit 140a, a sensor unit 140b, and a power supply unit 140c. . Here, blocks 110 to 130/140a to 140c correspond to blocks 110 to 130/140 of FIG. X3, respectively.

The communication unit 110 may transmit/receive signals (eg, media data, control signals, etc.) with external devices such as other wireless devices, portable devices, or media servers. Media data may include video, image, sound, and the like. The controller 120 may perform various operations by controlling components of the XR device 100a. For example, the controller 120 may be configured to control and/or perform procedures such as video/image acquisition, (video/image) encoding, and metadata generation and processing. The memory unit 130 may store data/parameters/programs/codes/commands necessary for driving the XR device 100a/creating an XR object. The input/output unit 140a may obtain control information, data, etc. from the outside and output the created XR object. The input/output unit 140a may include a camera, a microphone, a user input unit, a display unit, a speaker, and/or a haptic module. The sensor unit 140b may obtain XR device status, surrounding environment information, user information, and the like. The sensor unit 140b may include a proximity sensor, an illuminance sensor, an acceleration sensor, a magnetic sensor, a gyro sensor, an inertial sensor, an RGB sensor, an IR sensor, a fingerprint recognition sensor, an ultrasonic sensor, an optical sensor, a microphone, and/or a radar. there is. The power supply unit 140c supplies power to the XR device 100a and may include a wired/wireless charging circuit, a battery, and the like.

For example, the memory unit 130 of the XR device 100a may include information (eg, data, etc.) necessary for generating an XR object (eg, AR/VR/MR object). The input/output unit 140a may obtain a command to operate the XR device 100a from a user, and the control unit 120 may drive the XR device 100a according to the user's driving command. For example, when a user tries to watch a movie, news, etc. through the XR device 100a, the control unit 120 transmits content request information to another device (eg, the mobile device 100b) or through the communication unit 130. can be sent to the media server. The communication unit 130 may download/stream content such as movies and news from another device (eg, the portable device 100b) or a media server to the memory unit 130 . The control unit 120 controls and/or performs procedures such as video/image acquisition, (video/image) encoding, metadata generation/processing, etc. for content, and acquisition through the input/output unit 140a/sensor unit 140b. An XR object may be created/output based on information about a surrounding space or a real object.

In addition, the XR device 100a is wirelessly connected to the portable device 100b through the communication unit 110, and the operation of the XR device 100a may be controlled by the portable device 100b. For example, the mobile device 100b may operate as a controller for the XR device 100a. To this end, the XR device 100a may acquire 3D location information of the portable device 100b and then generate and output an XR object corresponding to the portable device 100b.

54 illustrates a robot applied in this specification. Robots may be classified into industrial, medical, household, military, and the like depending on the purpose or field of use.

Referring to FIG. 54 , the robot 100 may include a communication unit 110, a control unit 120, a memory unit 130, an input/output unit 140a, a sensor unit 140b, and a driving unit 140c. Here, blocks 110 to 130/140a to 140c correspond to blocks 110 to 130/140 of FIG. X3, respectively.

The communication unit 110 may transmit/receive signals (eg, driving information, control signals, etc.) with external devices such as other wireless devices, other robots, or control servers. The controller 120 may perform various operations by controlling components of the robot 100 . The memory unit 130 may store data/parameters/programs/codes/commands supporting various functions of the robot 100. The input/output unit 140a may obtain information from the outside of the robot 100 and output the information to the outside of the robot 100 . The input/output unit 140a may include a camera, a microphone, a user input unit, a display unit, a speaker, and/or a haptic module. The sensor unit 140b may obtain internal information of the robot 100, surrounding environment information, user information, and the like. The sensor unit 140b may include a proximity sensor, an illuminance sensor, an acceleration sensor, a magnetic sensor, a gyro sensor, an inertial sensor, an IR sensor, a fingerprint recognition sensor, an ultrasonic sensor, an optical sensor, a microphone, a radar, and the like. The driving unit 140c may perform various physical operations such as moving a robot joint. In addition, the driving unit 140c may make the robot 100 drive on the ground or fly in the air. The driving unit 140c may include actuators, motors, wheels, brakes, propellers, and the like.

55 illustrates an AI device applied to this specification.

AI devices include fixed or mobile devices such as TVs, projectors, smartphones, PCs, laptops, digital broadcasting terminals, tablet PCs, wearable devices, set-top boxes (STBs), radios, washing machines, refrigerators, digital signage, robots, and vehicles. It can be implemented with possible devices and the like.

Referring to FIG. 55, the AI device 100 includes a communication unit 110, a control unit 120, a memory unit 130, an input/output unit 140a/140b, a running processor unit 140c, and a sensor unit 140d. can include Blocks 110-130/140a-140d correspond to blocks 110-130/140 of Figure X3, respectively.

The communication unit 110 transmits wired/wireless signals (eg, sensor information, user input, learning) to other AI devices (eg, FIG. W1, 100x, 200, 400) or external devices such as the AI server 200 using wired/wireless communication technology. models, control signals, etc.) can be transmitted and received. To this end, the communication unit 110 may transmit information in the memory unit 130 to an external device or transmit a signal received from the external device to the memory unit 130 .

The controller 120 may determine at least one feasible operation of the AI device 100 based on information determined or generated using a data analysis algorithm or a machine learning algorithm. In addition, the controller 120 may perform the determined operation by controlling components of the AI device 100 . For example, the controller 120 may request, retrieve, receive, or utilize data from the learning processor unit 140c or the memory unit 130, and may perform a predicted operation among at least one feasible operation or an operation determined to be desirable. Components of the AI device 100 may be controlled to execute an operation. In addition, the control unit 120 collects history information including user feedback on the operation contents or operation of the AI device 100 and stores it in the memory unit 130 or the running processor unit 140c, or the AI server ( It can be transmitted to an external device such as FIG. W1, 400). The collected history information can be used to update the learning model.

The memory unit 130 may store data supporting various functions of the AI device 100 . For example, the memory unit 130 may store data obtained from the input unit 140a, data obtained from the communication unit 110, output data from the learning processor unit 140c, and data obtained from the sensing unit 140. In addition, the memory unit 130 may store control information and/or software codes necessary for operation/execution of the control unit 120 .

The input unit 140a may obtain various types of data from the outside of the AI device 100. For example, the input unit 120 may obtain learning data for model learning and input data to which the learning model is to be applied. The input unit 140a may include a camera, a microphone, and/or a user input unit. The output unit 140b may generate an output related to sight, hearing, or touch. The output unit 140b may include a display unit, a speaker, and/or a haptic module. The sensing unit 140 may obtain at least one of internal information of the AI device 100, surrounding environment information of the AI device 100, and user information by using various sensors. The sensing unit 140 may include a proximity sensor, an illuminance sensor, an acceleration sensor, a magnetic sensor, a gyro sensor, an inertial sensor, an RGB sensor, an IR sensor, a fingerprint recognition sensor, an ultrasonic sensor, an optical sensor, a microphone, and/or a radar. there is.

The learning processor unit 140c may learn a model composed of an artificial neural network using learning data. The running processor unit 140c may perform AI processing together with the running processor unit of the AI server (FIG. W1, 400). The learning processor unit 140c may process information received from an external device through the communication unit 110 and/or information stored in the memory unit 130 . In addition, the output value of the learning processor unit 140c may be transmitted to an external device through the communication unit 110 and/or stored in the memory unit 130.

The claims set forth herein can be combined in a variety of ways. For example, the technical features of the method claims of this specification may be combined to be implemented as a device, and the technical features of the device claims of this specification may be combined to be implemented as a method. In addition, the technical features of the method claims of the present specification and the technical features of the device claims may be combined to be implemented as a device, and the technical features of the method claims of the present specification and the technical features of the device claims may be combined to be implemented as a method.

Claims (15)

In a quantum cryptographic communication system, a method for determining key information performed by an apparatus,
transmits a random access (RA) preamble to another device;
Receiving a random access response (RAR) from the other device in response to the RA preamble;
performing a radio resource control (RRC) connection procedure with the other device;
encode data based on the key information; and
Transmitting the data to the other device,
The key information is
the device receives parity information from the other device;
The device estimates a quantum bit error rate (QBER) based on the parity information;
The device determines a reserved length of a transmission group based on the estimate of QBER, wherein the value of the reserved length for the transmission group has a value of N, where N is a natural number; and
the device determines the final length of the transmission group based on whether N is equal to 2^M, where M is a natural number;
A method characterized in that it is determined based on. The method of claim 1, wherein when the N is equal to 2^M, the value of the final length for the transmission group has a value of 2^M. The method of claim 2, wherein when N is greater than 2^M but less than 2^(M+1), the value of the final length for the transmission group has a value of 2^(M+1). How to. The method of claim 3, wherein when the value of the final length has a value of 2^(M+1), 2^(M+1)-N bits in the transmission group are filled with zeros. method. The method of claim 4, wherein when the 2^(M+1)-N bits are filled with 0, the 2^(M+1)-N bits filled with 0 are located at the rear end of the transmission group characterized by a method. The method of claim 1, wherein the apparatus determines an error location of key information based on a syndrome-based information reconciliation (IR) technique. 7. The method of claim 6, wherein the error location of the key information is determined based on a comparison of multi-dimensional syndromes. The method of claim 1, wherein the data is transmitted through an existing communication network,
the parity information is transmitted over a classical channel;
The parity information is characterized in that used in the post-processing of the quantum secret key transmitted through the quantum channel. The method of claim 8, wherein the existing communication network is a long term evolution (LTE) based communication network, a new RAT (NR) based communication network, or a wireless fidelity (WiFi) based communication network. In a quantum cryptographic communication system, a method for determining key information performed by an apparatus,
receive parity information from the other device;
estimating a quantum bit error rate (QBER) based on the parity information;
determine a reserved length of a transmission group based on the estimation of the QBER, wherein a value of the reserved length for the transmission group has a value of N, where N is a natural number;
Determine the final length of the transmission group based on whether N is equal to 2^M, where M is a natural number; and
and determining the key information based on the final length of the transmission group. device,
transceiver;
at least one memory; and
at least one processor operably coupled with the at least one memory and the transceiver, the processor comprising:
configured to control the transceiver to transmit a random access (RA) preamble to another device;
configured to control the transceiver to receive a random access response (RAR) from the other device in response to the RA preamble;
configured to perform a radio resource control (RRC) connection procedure with the other device;
configured to encode data based on the key information; and
configured to transmit the data to the other device,
The key information is
the device receives parity information from the other device;
The device estimates a quantum bit error rate (QBER) based on the parity information;
The device determines a reserved length of a transmission group based on the estimate of QBER, wherein the value of the reserved length for the transmission group has a value of N, where N is a natural number; and
the device determines the final length of the transmission group based on whether N is equal to 2^M, where M is a natural number;
Device, characterized in that determined based on. device,
at least one memory; and
at least one processor operably coupled to the at least one memory, the processor comprising:
configured to control the transceiver to transmit a random access (RA) preamble to another device;
configured to control the transceiver to receive a random access response (RAR) from the other device in response to the RA preamble;
configured to perform a radio resource control (RRC) connection procedure with the other device;
configured to encode data based on the key information; and
configured to transmit the data to the other device,
The key information is
the device receives parity information from the other device;
The device estimates a quantum bit error rate (QBER) based on the parity information;
The device determines a reserved length of a transmission group based on the estimate of QBER, wherein the value of the reserved length for the transmission group has a value of N, where N is a natural number; and
the device determines the final length of the transmission group based on whether N is equal to 2^M, where M is a natural number;
Device, characterized in that determined based on. In at least one computer readable medium containing instructions based on being executed by at least one processor,
configured to control the transceiver to transmit a random access (RA) preamble to another device;
configured to control the transceiver to receive a random access response (RAR) from the other device in response to the RA preamble;
configured to perform a radio resource control (RRC) connection procedure with the other device;
configured to encode data based on the key information; and
configured to transmit the data to the other device,
The key information is
configured for the at least one processor to control the transceiver to receive parity information from the other device;
the at least one processor is configured to estimate a quantum bit error rate (QBER) based on the parity information;
wherein the at least one processor is configured to determine a reserved length of a transmission group based on the estimate of the QBER, wherein a value of the reserved length for the transmission group has a value of N, where N is a natural number; and
wherein the at least one processor is configured to determine a final length of the transmission group based on whether N is equal to 2^M, where M is a natural number;
Recording medium, characterized in that determined based on. In a quantum cryptographic communication system, a method for determining key information performed by an apparatus,
Receive a random access (RA) preamble from another device;
Transmitting a random access response (RAR) to the other device in response to the RA preamble;
performing a radio resource control (RRC) connection procedure with the other device;
receive data from the other device; and
Decrypt the data based on the key information;
The key information is determined based on the length of a transmission group having a length of 2^M, wherein M is a natural number. device,
transceiver;
at least one memory; and
at least one processor operably coupled with the at least one memory and the transceiver, the processor comprising:
configured to control the transceiver to receive a random access (RA) preamble from another device;
configured to control the transceiver to transmit a random access response (RAR) to the other device in response to the RA preamble;
configured to perform a radio resource control (RRC) connection procedure with the other device;
configured to control the transceiver to receive data from the other device; and
configured to decrypt the data based on the key information;
The key information is determined based on the length of a transmission group having a length of 2^M, wherein M is a natural number.

Images